← All advisories

Critical severity10.0NVD Advisory· Published Sep 9, 2021· Updated Jun 17, 2026

CVE-2021-39296

CVE-2021-39296

Description

In OpenBMC 2.9, crafted IPMI messages allow an attacker to bypass authentication and gain full control of the system.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

5

Openbmc Project/Openbmc
cpe:2.3:a:openbmc-project:openbmc:2.9.0:-:*:*:*:*:*:*
OpenBMC/OpenBMCdescription
Google/OpenBMCllm-create
Range: <2.9
Intel/OpenBMCllm-fuzzy
Range: <2.9
OpenBMCS/OpenBMCSllm-fuzzy
Range: <2.9

Patches

Vulnerability mechanics

References

2

github.com/google/security-research/security/advisories/GHSA-gg9x-v835-m48qnvdExploitThird Party Advisory
www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00737.htmlnvd

News mentions

0

No linked articles in our index yet.