Vulnerability · Published Aug 22, 2022 · Assigned by ibm

CVE-2021-29891

Medium 4.5

In plain English

A medium-severity security flaw in Power 9 AC922 from IBM. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 40% of all known vulnerabilities).

Severity (CVSS 3.0)4.5Medium
Exploit odds (30 days)0.5%top 60.0% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known

Official description

IBM OPENBMC OP910 and OP940 could allow a privileged user to upload an improper site identity certificate that may cause it to lose network services. IBM X-Force ID: 207221.

Affected products (as reported)

VendorProductVersions
IBM Power 9 AC922 OP910OP940

References