CVE-2021-39296

CriticalCVSS 10.0/10Last modified Jun 17, 2026

Description

In OpenBMC 2.9, crafted IPMI messages allow an attacker to bypass authentication and gain full control of the system.

Metrics

CVSS 3.1 10.0/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Weakness enumeration

CWE-287

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

https://github.com/google/security-research/security/advisories/GHSA-gg9x-v835-m48qExploit, Third Party Advisory
https://github.com/openbmc/openbmcThird Party Advisory
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00737.html
https://github.com/google/security-research/security/advisories/GHSA-gg9x-v835-m48qExploit, Third Party Advisory
https://github.com/openbmc/openbmcThird Party Advisory
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00737.html

Timeline

Published: Sep 9, 2021
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-392978.8Potential vulnerabilities have been identified in UEFI firmware (BIOS) for some PC products which may allow escalation of privilege and arbi CVE-2021-392988.8A potential vulnerability in AMD System Management Mode (SMM) interrupt handler may allow an attacker with high privileges to access the SMM CVE-2021-392998.8Potential vulnerabilities have been identified in UEFI firmware (BIOS) for some PC products which may allow escalation of privilege and arbi CVE-2021-39306.5An off-by-one error was found in the SCSI device emulation in QEMU. It could occur while processing MODE SELECT commands in mode_sense_page(CVE-2021-393008.8Potential vulnerabilities have been identified in UEFI firmware (BIOS) for some PC products which may allow escalation of privilege and arbi CVE-2021-393018.8Potential vulnerabilities have been identified in UEFI firmware (BIOS) for some PC products which may allow escalation of privilege and arbi CVE-2021-393029.8MISP 2.4.148, in certain configurations, allows SQL injection via the app/Model/Log.php $conditions['org'] value.CVE-2021-393039.8The server in Jamf Pro before 10.32.0 has an SSRF vulnerability, aka PI-006352. NOTE: Jamf Nation will also publish an article about this vu CVE-2021-393047.5Proofpoint Enterprise Protection before 8.12.0-2108090000 allows security control bypass.CVE-2021-393069.8A stack buffer overflow was discovered on Realtek RTL8195AM device before 2.0.10, it exists in the client code when an attacker sends a big CVE-2021-393076.1PDFTron's WebViewer UI 8.0 or below renders dangerous URLs as hyperlinks in supported documents, including JavaScript URLs, allowing the exe CVE-2021-393086.1The WooCommerce myghpay Payment Gateway WordPess plugin is vulnerable to Reflected Cross-Site Scripting via the clientref parameter found in