CVE-2021-47718: Openbmcs

High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days.

OpenBMCS 2.4 contains an information disclosure vulnerability that allows unauthenticated attackers to access sensitive files by exploiting directory listing functionality. Attackers can browse directories like /debug/ and /php/ to discover configuration files, database credentials, and system information.

Affected products

• Openbmcs Openbmcs: version 2.4 only

Published 2025-12-09. Last modified 2026-06-17.