CVE-2021-42772

CRITICAL

Broadcom Emulex Hba Manager < 11.4.425.0 - Buffer Overflow

Title source: rule
STIX 2.1

Description

Broadcom Emulex HBA Manager/One Command Manager versions before 11.4.425.0 and 12.8.542.31, if not installed in Strictly Local Management mode, have a buffer overflow vulnerability in the remote GetDumpFile command that could allow a user to attempt various attacks. In non-secure mode, the user is unauthenticated

References (1)

Core 1
Core References
Exploit, Vendor Advisory x_refsource_confirm
https://docs.broadcom.com/doc/elx_HBAManager-Lin-RN12811-101.pdf

Scores

CVSS v3 9.8
EPSS 0.0067
EPSS Percentile 71.5%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-120
Status published
Products (2)
broadcom/emulex_hba_manager < 11.4.425.0
broadcom/one_command_manager < 12.8.542.31
Published Nov 03, 2021
Tracked Since Feb 18, 2026