medium5.9
CVE-2021-29847
BMC firmware (IBM Power System S821LC Server (8001-12C) OP825.50) configuration changed to allow an authenticated user to open an insecure communication channe…
Impact
BMC firmware (IBM Power System S821LC Server (8001-12C) OP825.50) configuration changed to allow an authenticated user to open an insecure communication channel which could allow an attacker to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 205267.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ibm | Power Hardware Management Console \(7063-Cr1\) Firmware | before op825.51 |
| Ibm | Power System Cs822lc \(8005-22n\) Firmware | before op825.51 |
| Ibm | Power System Cs821lc \(8005-12n\) Firmware | before op825.51 |
| Ibm | Power System S822lc \(8001-22c\) Firmware | before op825.51 |
| Ibm | Power System S821lc \(8001-12c\) Firmware | before op825.51 |