Vulnerability · Published Dec 15, 2021 · Assigned by ibm
CVE-2021-29847
Medium 5.3
In plain English
A medium-severity security flaw in Power System S821LC Server (8001-12C) from IBM. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.0% (higher than 64% of all known vulnerabilities).
Severity (CVSS 3.0)5.3Medium
Exploit odds (30 days)1.0%top 36.3% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
BMC firmware (IBM Power System S821LC Server (8001-12C) OP825.50) configuration changed to allow an authenticated user to open an insecure communication channel which could allow an attacker to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 205267.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| IBM | Power System S821LC Server (8001-12C) | OP825.50 |
References
- https://www.ibm.com/support/pages/node/6520420 x_refsource_CONFIRM
- ibm-bmc-cve202129847-info-disc (205267) vdb-entry, x_refsource_XF