Broadcom Emulex HBA Manager Buffer Overflow Vulnerability

Broadcom Emulex HBA Manager (formerly known as OneCommand Manager) provides centralized management of Emulex HBAs in physical and virtual server deployments through a graphical user interface (GUI) and a fully scriptable command line user interface (CLI). Manager versions prior to 11.4.425.0, 12.8.542.31 have a buffer overflow vulnerability when the remote firmware download feature is not installed in “strict local management” mode. An attacker could exploit this vulnerability to perform a variety of attacks.