Lucene search

HpeCVE-2021-29214

HistoryDec 10, 2021 - 5:15 p.m.

CVE-2021-29214

2021-12-1017:15:07

hpe

web.nvd.nist.gov

cve-2021-29214

hpe storeserv management console

ssmc

code injection

privilege escalation

security vulnerability

nvd

CVSS2

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

CVSS3

7.2

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

AI Score

6.9

Confidence

High

EPSS

0.001

Percentile

42.8%

JSON

A security vulnerability has been identified in HPE StoreServ Management Console (SSMC). An authenticated SSMC administrator could exploit the vulnerability to inject code and elevate their privilege in SSMC. The scope of this vulnerability is limited to SSMC. Note: The arrays being managed are not impacted by this vulnerability. This vulnerability impacts SSMC versions 3.4 GA to 3.8.1.

Affected configurations

Nvd

Node

hpstoreserv_management_consoleRange3.4–3.8.1

VendorProductVersionCPE
hpstoreserv_management_console*cpe:2.3:a:hp:storeserv_management_console:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
hp	storeserv_management_console	*	cpe:2.3:a:hp:storeserv_management_console::::::::

CNA Affected

[
  {
    "product": "HPE StoreServ Management Console (SSMC); HPE 3PAR StoreServ Management and Core Software Media",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "3.4 GA to 3.8.1"
      }
    ]
  }
]

References

support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst04207en_us

Social References

CVSS2

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

CVSS3

7.2

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

AI Score

6.9

Confidence

High

EPSS

0.001

Percentile

42.8%

JSON

Related for CVE-2021-29214