CVE-2021-47718

8.7 highEPSS 0.5%

High (8.7) in openbmcs openbmcs. EPSS 0.5% chance of exploitation in the next 30 days.

OpenBMCS 2.4 contains an information disclosure vulnerability that allows unauthenticated attackers to access sensitive files by exploiting directory listing functionality. Attackers can browse directories like /debug/ and /php/ to discover configuration files, database credentials, and system information.

Severity

CVSS 4.0

8.7 high

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 45% of CVEs (scores of 2026-10-31)
CWE: CWE-548
Published: 2025-12-09
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

openbmcs:openbmcs

References

https://www.exploit-db.com/exploits/50671
https://www.openbmcs.com
https://www.vulncheck.com/advisories/openbmcs-directory-listing-information-disclosure
https://www.zeroscience.mk/en/vulnerabilities/ZSL-2022-5695.php

Check your stack JSON