CVE-2021-42772

Broadcom Emulex HBA Manager/One Command Manager versions before 11.4.425.0 and 12.8.542.31, if not installed in Strictly Local Management mode, have a buffer overflow vulnerability in the remote GetDumpFile command that could allow a user to attempt various attacks. In non-secure mode, the user is unauthenticated

Score

CVSS 3.1 9.8 Critical

Status

Modified - cve@mitre.org

Published

2021-11-03

Last modified

2024-08-04

Weaknesses

CWE-120

Affected products

• Emulex Hba Manager (Broadcom)
• One Command Manager (Broadcom)

References

• https://docs.broadcom.com/doc/elx_HBAManager-Lin-RN12811-101.pdf