CVE-2021-29847
Medium
Description
BMC firmware (IBM Power System S821LC Server (8001-12C) OP825.50) configuration changed to allow an authenticated user to open an insecure communication channel which could allow an attacker to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 205267.
SeverityMedium
CVSS5.9
Exploit probability—
Product
Ibm Power Hardware Management Console \(7063-cr1\) Firmware
PublishedDec 15, 2021
First seenDec 15, 2021
How to fix
Update
- ibm power_hardware_management_console_\(7063-cr1\)_firmwareop825.51 or later
- ibm power_system_cs822lc_\(8005-22n\)_firmwareop825.51 or later
- ibm power_system_cs821lc_\(8005-12n\)_firmwareop825.51 or later
- ibm power_system_s822lc_\(8001-22c\)_firmwareop825.51 or later
- ibm power_system_s821lc_\(8001-12c\)_firmwareop825.51 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm power_hardware_management_console_\(7063-cr1\)_firmware | v < op825.51 | op825.51 |
| ibm power_system_cs822lc_\(8005-22n\)_firmware | v < op825.51 | op825.51 |
| ibm power_system_cs821lc_\(8005-12n\)_firmware | v < op825.51 | op825.51 |
| ibm power_system_s822lc_\(8001-22c\)_firmware | v < op825.51 | op825.51 |
| ibm power_system_s821lc_\(8001-12c\)_firmware | v < op825.51 | op825.51 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.