CVE-2021-38960: IBM Power Hardware Management Console (7063-CR2) Firmware

High severity, CVSS 7.5. EPSS: 1.1% chance of exploitation in the next 30 days.

IBM OPENBMC OP920, OP930, and OP940 could allow an unauthenticated user to obtain sensitive information. IBM X-Force ID: 212047.

Affected products

• IBM Power Hardware Management Console (7063-CR2) Firmware: version op940 only
• IBM Power System AC922 (8335-Gth) Firmware: version op920 only; version op930 only; version op940 only
• IBM Power System AC922 (8335-Gtx) Firmware: version op920 only; version op930 only; version op940 only

Published 2022-02-04. Last modified 2026-06-17.