7.8

CVE-2021-29219

A potential local buffer overflow vulnerability has been identified in HPE FlexNetwork 5130 EL Switch Series version: Prior to 5130_EI_7.10.R3507P02. HPE has made the following software update to resolve the vulnerability in HPE FlexNetwork 5130 EL Switch Series version 5130_EL_7.10.R3507P02.

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Hpe ≫ Flexnetwork 5130 Jg932a Firmware Version < 5130_ei_7.10.r3507p02
   Hpe ≫ Flexnetwork 5130 Jg932a Version-
Hpe ≫ Flexnetwork 5130 Jg933a Firmware Version < 5130_ei_7.10.r3507p02
   Hpe ≫ Flexnetwork 5130 Jg933a Version-
Hpe ≫ Flexnetwork 5130 Jg934a Firmware Version < 5130_ei_7.10.r3507p02
   Hpe ≫ Flexnetwork 5130 Jg934a Version-
Hpe ≫ Flexnetwork 5130 Jg936a Firmware Version < 5130_ei_7.10.r3507p02
   Hpe ≫ Flexnetwork 5130 Jg936a Version-
Hpe ≫ Flexnetwork 5130 Jg937a Firmware Version < 5130_ei_7.10.r3507p02
   Hpe ≫ Flexnetwork 5130 Jg937a Version-
Hpe ≫ Flexnetwork 5130 Jg940a Firmware Version < 5130_ei_7.10.r3507p02
   Hpe ≫ Flexnetwork 5130 Jg940a Version-
Hpe ≫ Flexnetwork 5130 Jg941a Firmware Version < 5130_ei_7.10.r3507p02
   Hpe ≫ Flexnetwork 5130 Jg941a Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.07% 0.17
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov 4.6 3.9 6.4
AV:L/AC:L/Au:N/C:P/I:P/A:P
CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow.