CVE-2021-29212

2021-11-0113:18:43

hpe

www.cve.org

hpe

ilo amplifier pack

directory traversal

remote exploitation

arbitrary code

confidentiality

integrity

availability

AI Score

9.8

Confidence

High

EPSS

0.006

Percentile

77.8%

JSON

A remote unauthenticated directory traversal security vulnerability has been identified in HPE iLO Amplifier Pack versions 1.80, 1.81, 1.90 and 1.95. The vulnerability could be remotely exploited to allow an unauthenticated user to run arbitrary code leading complete impact to confidentiality, integrity, and availability of the iLO Amplifier Pack appliance.

CNA Affected

[
  {
    "product": "iLO Amplifier Pack",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Ver 1.80, Ver 1.81, Ver 1.90, and Ver 1.95"
      }
    ]
  }
]