Broadcom Emulex HBA Manager/One Command Manager versions before 11.4.425.0 and 12.8.542.31, if not installed in Strictly Local Management mode, have a buffer overflow vulnerability in the remote GetDumpFile command that could allow a user to attempt various attacks. In non-secure mode, the user is unauthenticated
References
| Link | Resource |
|---|---|
| https://docs.broadcom.com/doc/elx_HBAManager-Lin-RN12811-101.pdf | Exploit Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
12 Nov 2021, 15:16
| Type | Values Removed | Values Added |
|---|---|---|
| References | (CONFIRM) https://docs.broadcom.com/doc/elx_HBAManager-Lin-RN12811-101.pdf - Exploit, Vendor Advisory | |
| CWE | CWE-120 | |
| CPE | cpe:2.3:a:broadcom:emulex_hba_manager:*:*:*:*:*:*:*:* cpe:2.3:a:broadcom:one_command_manager:*:*:*:*:*:*:*:* |
|
| CVSS |
v2 : v3 : |
v2 : 6.8
v3 : 9.8 |
12 Nov 2021, 02:15
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | Broadcom Emulex HBA Manager/One Command Manager versions before 11.4.425.0 and 12.8.542.31, if not installed in Strictly Local Management mode, have a buffer overflow vulnerability in the remote GetDumpFile command that could allow a user to attempt various attacks. In non-secure mode, the user is unauthenticated | |
| References |
|
03 Nov 2021, 20:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2021-11-03 20:15
Updated : 2023-12-10 14:09
NVD link : CVE-2021-42772
Mitre link : CVE-2021-42772
CVE.ORG link : CVE-2021-42772
JSON object : View
Products Affected
broadcom
- one_command_manager
- emulex_hba_manager
CWE
CWE-120
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')