critical10.0
CVE-2021-39296
In OpenBMC 2.9, crafted IPMI messages allow an attacker to bypass authentication and gain full control of the system.
Impact
In OpenBMC 2.9, crafted IPMI messages allow an attacker to bypass authentication and gain full control of the system.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Openbmc-Project | Openbmc | Version 2.9.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/google/security-research/security/advisories/GHSA-gg9x-v835-m48q
- https://github.com/openbmc/openbmc
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00737.html
- https://github.com/google/security-research/security/advisories/GHSA-gg9x-v835-m48q
- https://github.com/openbmc/openbmc
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00737.html