7.2
CVE-2021-29214
- EPSS 0.31%
- Veröffentlicht 10.12.2021 17:15:07
- Zuletzt bearbeitet 21.11.2024 06:00:50
- Quelle security-alert@hpe.com
- CVE-Watchlists
- Unerledigt
A security vulnerability has been identified in HPE StoreServ Management Console (SSMC). An authenticated SSMC administrator could exploit the vulnerability to inject code and elevate their privilege in SSMC. The scope of this vulnerability is limited to SSMC. Note: The arrays being managed are not impacted by this vulnerability. This vulnerability impacts SSMC versions 3.4 GA to 3.8.1.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Hp ≫ Storeserv Management Console Version >= 3.4 <= 3.8.1
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.31% | 0.538 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 7.2 | 1.2 | 5.9 |
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
|
| nvd@nist.gov | 6.5 | 8 | 6.4 |
AV:N/AC:L/Au:S/C:P/I:P/A:P
|