IBM 8335-Gtb Firmware vulnerabilities

2 CVEs affecting IBM 8335-Gtb Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-29695, published 2021-05-25.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2021-29695, published 2021-05-25. Medium severity, CVSS 6.5. EPSS: 2.3% chance of exploitation in the next 30 days. IBM Host firmware for LC-class Systems could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request that would allow them to delete…
CVE-2020-4839, published 2021-05-25. Medium severity, CVSS 4.9. EPSS: 1.5% chance of exploitation in the next 30 days. IBM Host firmware for LC-class Systems is vulnerable to a stack based buffer overflow, caused by improper bounds checking. A remote privileged attacker could exploit this vulnerability and cause a…