High severity · published Jul 19, 2021
CVE-2021-29707
IBM HMC (Hardware Management Console) V9.1.910.0 and V9.2.950.0 could allow a local user to escalate their privileges to root access on a restricted shell
7.8
CVSS
0.3%
EPSS
No
On KEV
Description
IBM HMC (Hardware Management Console) V9.1.910.0 and V9.2.950.0 could allow a local user to escalate their privileges to root access on a restricted shell. IBM X-Force ID: 200879.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 23% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
HM
Hardware Management Console · Ibm
9.1.910.0; 9.2.950.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2021-29707
CVE.org
https://www.cve.org/CVERecord?id=CVE-2021-29707
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/200879
Vendor Advisory
https://www.ibm.com/support/pages/node/6473347
More from Hardware Management Console
9.8
CVE-2026-12943
This Power Hardware Management Console update is being released to address
7.8
CVE-2025-1950
IBM Hardware Management Console - Power Systems command execution
7.8
CVE-2023-38280
IBM Power HMC privilege escalation
6.8
CVE-2016-0230
IBM Power Hardware Management Console (HMC) 7.3 through 7.3.0 SP7, 7.9 through 7.9.0 SP3, 8.1 through 8.1.0 SP3, 8.2 through 8.2.0 SP2, 8.3 through 8.3.0 SP2, 8.4 through 8.4.0…
6.7
CVE-2025-1951
IBM Hardware Management Console - Power Systems command execution