CVE-2021-36357

CVE-2021-36357 is a critical vulnerability in OpenPOWER 2.6 firmware, specifically affecting skiboot, where a type mismatch in the unpack_timestamp() function allows for incorrect endian conversion of a year value, potentially bypassing timestamp checks. With a CVSS score of 9.8, it presents a critical risk due to its network-based attack vector, low attack complexity, and high impact on confidentiality, integrity, and availability. While there is no known active exploitation, public exploit code, or Metasploit/Nuclei modules, the vulnerability has garnered significant community discussion, indicating awareness among security researchers.