CVE-2021-29740

Severity: high (CVSS 7.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2021-06-01 · updated 2026-06-17
Weakness: CWE-134

Description

IBM Spectrum Scale 5.0.0 through 5.0.5.6 and 5.1.0 through 5.1.0.3 system core component is affected by a format string security vulnerability. An attacker could execute arbitrary code in the context of process memory, potentially escalating their system privileges and taking control over the entire system with root access. IBM X-Force ID: 201474.

Affected products

IBM Spectrum Scale: from 5.0.0.0 before 5.0.5.7; from 5.1.0 before 5.1.1.0 — fixed in 5.0.5.7, 5.1.1.0

How to fix

Upgrade to a fixed version: IBM Spectrum Scale 5.0.5.7, 5.1.1.0. Check the vendor advisory for mitigations.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/201474
https://www.ibm.com/support/pages/node/6457629
https://exchange.xforce.ibmcloud.com/vulnerabilities/201474
https://www.ibm.com/support/pages/node/6457629

Get alerted when CVE-2021-29740 or the next vulnerability affects your stack