by Kastro
Paper/Archive/CVE-2021-29212

CVE-2021-29212

hpe — A remote unauthenticated directory traversal security vulnerability has been identified in HPE iLO Amplifier Pack versions 1.80, 1.81, 1.…

EPSS 14%CVSS 9.8
critical.is priorityof 100
49
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 96.5.965 × 2019.3No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

A remote unauthenticated directory traversal security vulnerability has been identified in HPE iLO Amplifier Pack versions 1.80, 1.81, 1.90 and 1.95. The vulnerability could be remotely exploited to allow an unauthenticated user to run arbitrary code leading complete impact to confidentiality, integrity, and availability of the iLO Amplifier Pack appliance.

Affected

ProductAffectedFixed inSource
iLO Amplifier PackVer 1.80, Ver 1.81, Ver 1.90, and Ver 1.95–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

refsupport.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn04189en_usrefzerodayinitiative.com/advisories/ZDI-21-1278