Buffer overflow in HPE Flexnetwork 5130 Jg932a
CVE-2021-29219
A potential local buffer overflow vulnerability has been identified in HPE FlexNetwork 5130 EL Switch Series version: Prior to 5130_EI_7.10.R3507P02. HPE has made the following software update to resolve the vulnerability in HPE FlexNetwork 5130 EL Switch Series version 5130_EL_7.10.R3507P02.
Vulnerability class: Buffer Overflow
EPSS: 0.002 (13.9th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.
Affected products
- Hpe Flexnetwork_5130_jg932a
- Hpe Flexnetwork_5130_jg932a_firmware
- Hpe Flexnetwork_5130_jg933a
- Hpe Flexnetwork_5130_jg933a_firmware
- Hpe Flexnetwork_5130_jg934a
- Hpe Flexnetwork_5130_jg934a_firmware
- Hpe Flexnetwork_5130_jg936a
- Hpe Flexnetwork_5130_jg936a_firmware
- Hpe Flexnetwork_5130_jg937a
- Hpe Flexnetwork_5130_jg937a_firmware
Weakness classification (CWE)
References
- security-alert@hpe.com (Patch, x_refsource_MISC, Vendor Advisory)
Frequently asked questions
- What is CVE-2021-29219?
- CVE-2021-29219 is a high-severity vulnerability in HPE Flexnetwork 5130 Jg932a, classified under Buffer Copy without Checking Size of Input (Classic Buffer Overflow). CVSS score: 7.8/10. Published 2022-02-04.
- How severe is CVE-2021-29219?
- High severity. CVSS v3 base score is 7.8 out of 10.