High severity8.8NVD Advisory· Published Dec 9, 2025· Updated Jun 17, 2026
CVE-2021-47701
CVE-2021-47701
Description
OpenBMCS 2.4 allows an attacker to escalate privileges from a read user to an admin user by manipulating permissions and exploiting a vulnerability in the update_user_permissions.php script. Attackers can submit a malicious HTTP POST request to PHP scripts in '/plugins/useradmin/' directory.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3Patches
Vulnerability mechanics
References
3- www.exploit-db.com/exploits/50669nvdExploitThird Party AdvisoryVDB Entry
- www.zeroscience.mk/en/vulnerabilities/ZSL-2022-5693.phpnvdExploitThird Party Advisory
- www.vulncheck.com/advisories/openbmcs-user-management-privilege-escalationnvdThird Party Advisory
News mentions
0No linked articles in our index yet.