CVE-2021-29847: Medium severity IBM Power Hardware Management Console \(7063-cr1\) Firmware vulnerability
BMC firmware (IBM Power System S821LC Server (8001-12C) OP825.50) configuration changed to allow an authenticated user to open an insecure communication channel which could allow an attacker to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 205267.
Other sources
BMC firmware configuration changed to allow an authenticated user to open an insecure communication channel which could allow an attacker to obtain sensitive information using man in the middle techniques.
— IBM
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2021-29847?
CVE-2021-29847 is considers a moderate severity vulnerability due to the potential for man-in-the-middle attacks.
How do I fix CVE-2021-29847?
To remediate CVE-2021-29847, upgrade the BMC firmware on affected IBM Power Systems to a version higher than OP825.50.
What are the affected products for CVE-2021-29847?
CVE-2021-29847 affects IBM Power System S821LC with firmware OP825.50 and various versions of IBM Hardware Management Console firmware.
What type of attack does CVE-2021-29847 allow?
CVE-2021-29847 allows authenticated users to open insecure communication channels, potentially enabling man-in-the-middle attacks.
What information can be exposed due to CVE-2021-29847?
CVE-2021-29847 could allow attackers to obtain sensitive information transmitted over the insecure channel.