Lucene search

K
cve[email protected]CVE-2021-29218
HistoryFeb 04, 2022 - 11:15 p.m.

CVE-2021-29218

2022-02-0423:15:11
CWE-428
web.nvd.nist.gov
32
cve-2021-29218
hpe
agentless management service
windows
vulnerability
security
update
nvd

6.7 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

6.5 Medium

AI Score

Confidence

High

4.6 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

0.0004 Low

EPSS

Percentile

12.6%

A local unquoted search path security vulnerability has been identified in HPE Agentless Management Service for Windows version(s): Prior to 1.44.0.0, 10.96.0.0. This vulnerability could be exploited locally by a user with high privileges to execute malware that may lead to a loss of confidentiality, integrity, and availability. HPE has provided software updates to resolve the vulnerability in HPE Agentless Management Service for Windows.

Affected configurations

NVD
Node
microsoftwindowsMatch-x64
AND
hpeagentless_managementRange<1.44.0.0
Node
hpeapollo_20Match-
OR
hpeapollo_2000_gen_10_plusMatch-
OR
hpeapollo_6500Match-
OR
hpeapollo_6500_gen10_plusMatch-
OR
hpeapollo_80Match-
OR
hpeproliant_dlMatch-
OR
hpeproliant_mlMatch-
OR
hpesynergy_480_gen9Match-
OR
hpesynergy_620_gen9Match-
OR
hpesynergy_660_gen9Match-
OR
hpesynergy_680_gen9Match-
AND
hpeproliant_agentless_managementRange<10.96.0.0

CNA Affected

[
  {
    "product": "HPE Agentless Management",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Prior to 1.44.0.0, 10.96.0.0"
      }
    ]
  }
]

6.7 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

6.5 Medium

AI Score

Confidence

High

4.6 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

0.0004 Low

EPSS

Percentile

12.6%

Related for CVE-2021-29218