CVE-2021-38960

HIGH

IBM Power System AC922 and HMC Firmware - Unauthenticated Exposure of Sensitive Information

Title source: llm
STIX 2.1

Description

IBM OPENBMC OP920, OP930, and OP940 could allow an unauthenticated user to obtain sensitive information. IBM X-Force ID: 212047.

References (2)

Core 2
Core References
Vendor Advisory x_refsource_confirm
https://www.ibm.com/support/pages/node/6529322
VDB Entry, Vendor Advisory vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/212047

Scores

CVSS v3 7.5
EPSS 0.0022
EPSS Percentile 44.8%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Details

CWE
CWE-200
Status published
Products (7)
ibm/power_hardware_management_console_\(7063-cr2\)_firmware op940
ibm/power_system_ac922_\(8335-gth\)_firmware op920
ibm/power_system_ac922_\(8335-gth\)_firmware op930
ibm/power_system_ac922_\(8335-gth\)_firmware op940
ibm/power_system_ac922_\(8335-gtx\)_firmware op920
ibm/power_system_ac922_\(8335-gtx\)_firmware op930
ibm/power_system_ac922_\(8335-gtx\)_firmware op940
Published Feb 04, 2022
Tracked Since Feb 18, 2026