Unrated severityNVD Advisory· Published Dec 9, 2025· Updated Apr 7, 2026
OpenBMCS User Management Privilege Escalation
CVE-2021-47701
Description
OpenBMCS 2.4 allows an attacker to escalate privileges from a read user to an admin user by manipulating permissions and exploiting a vulnerability in the update_user_permissions.php script. Attackers can submit a malicious HTTP POST request to PHP scripts in '/plugins/useradmin/' directory.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2Patches
Vulnerability mechanics
References
3- www.exploit-db.com/exploits/50669mitreexploit
- www.vulncheck.com/advisories/openbmcs-user-management-privilege-escalationmitrethird-party-advisory
- www.zeroscience.mk/en/vulnerabilities/ZSL-2022-5693.phpmitrethird-party-advisory
News mentions
0No linked articles in our index yet.