CVE-2021-29847: IBM Power Hardware Management Console (7063-CR1) Firmware

Medium severity, CVSS 5.9. EPSS: 1% chance of exploitation in the next 30 days.

BMC firmware (IBM Power System S821LC Server (8001-12C) OP825.50) configuration changed to allow an authenticated user to open an insecure communication channel which could allow an attacker to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 205267.

Affected products

• IBM Power Hardware Management Console (7063-CR1) Firmware: before op825.51 (fixed in op825.51)
• IBM Power System CS821LC (8005-12n) Firmware: before op825.51 (fixed in op825.51)
• IBM Power System CS822LC (8005-22n) Firmware: before op825.51 (fixed in op825.51)
• IBM Power System s821lc (8001-12c) Firmware: before op825.51 (fixed in op825.51)
• IBM Power System s822lc (8001-22c) Firmware: before op825.51 (fixed in op825.51)

Published 2021-12-15. Last modified 2026-06-17.