CVE Feed

    Dashboard / CVE / CVE-2021-29213

    CVE-2021-29213

    A potential local bypass of security restrictions vulnerability has been identified in HPE ProLiant DL20 Gen10, HPE ProLiant ML30 Gen10, and HPE ProLiant MicroServer Gen10 Plus server's system ROMs prior to version 2.52. The vulnerability could be locally exploited to cause disclosure of sensitive information, denial of service (DoS), and/or compromise system integrity.

    Published:Nov 1, 2021
    Last Modified:Nov 21, 2024
    EPS:Nov 1, 2021
    EPSS Score:0.00036
    CVSS Score:6.7

    Affected Products

    Vendor
    Hpe
    Product
    Proliant Dl20 Gen10 Server
    Vendor
    Hpe
    Product
    Proliant Dl20 Gen10 Server Firmware
    Vendor
    Hpe
    Product
    Proliant Microserver Gen10 Plus
    Vendor
    Hpe
    Product
    Proliant Microserver Gen10 Plus Firmware
    Vendor
    Hpe
    Product
    Proliant Ml30 Gen10 Server
    Vendor
    Hpe
    Product
    Proliant Ml30 Gen10 Server Firmware

    Exploits

    No exploit reference

    Common Weakness Enumeration

    No CWE recorded yet

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2023-30911 (CVSS 6.8) — HPE Integrated Lights-Out 5, and Integrated Lights-Out 6 using iLOrest may cause denial of service.…
    CVE-2023-28083 (CVSS 8.3) — A remote Cross-site Scripting vulnerability was discovered in HPE Integrated Lights-Out 6 (iLO 6), Integrated …
    CVE-2021-46846 (CVSS 6.4) — Cross Site Scripting vulnerability in Hewlett Packard Enterprise Integrated Lights-Out 5. …
    CVE-2022-28637 (CVSS 7.8) — A local Denial of Service (DoS) and local arbitrary code execution vulnerability that could potentially lead t…
    CVE-2022-28639 (CVSS 8.8) — A remote potential adjacent denial of service (DoS) and potential adjacent arbitrary code execution vulnerabil…
    CVE-2022-28638 (CVSS 7.8) — An isolated local disclosure of information and potential isolated local arbitrary code execution vulnerabilit…
    CVE-2022-28640 (CVSS 8.8) — A potential local adjacent arbitrary code execution vulnerability that could potentially lead to a loss of con…
    CVE-2022-28634 (CVSS 6.7) — A local arbitrary code execution vulnerability was discovered in HPE Integrated Lights-Out 5 (iLO 5) firmware …
    CVE-2022-28633 (CVSS 7.3) — A local disclosure of sensitive information and a local unauthorized data modification vulnerability were disc…
    CVE-2022-28635 (CVSS 7.4) — A potential local arbitrary code execution and a local denial of service (DoS) vulnerability within an isolate…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High