CVE-2021-47701

CVE-2021-47701 describes a critical privilege escalation vulnerability in OpenBMCS 2.4, allowing a low-privileged read user to gain administrative access. This is achieved by manipulating permissions via a malicious HTTP POST request to the update_user_permissions.php script within the /plugins/useradmin/ directory. With a CVSS score of 8.8 (High), the vulnerability is easily exploitable over the network with low privileges and no user interaction, leading to high impacts on confidentiality, integrity, and availability. There is currently no public exploit intelligence, such as Metasploit or ExploitDB modules, and no evidence of active exploitation or significant community discussion.