VULNERABILITY INTELLIGENCE
CVE-2021-29214
CVSS score7.2 HIGH
EPSS probability1.13%
CISA KEVNot currently listed
Published2021-12-10
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Description
A security vulnerability has been identified in HPE StoreServ Management Console (SSMC). An authenticated SSMC administrator could exploit the vulnerability to inject code and elevate their privilege in SSMC. The scope of this vulnerability is limited to SSMC. Note: The arrays being managed are not impacted by this vulnerability. This vulnerability impacts SSMC versions 3.4 GA to 3.8.1.
Weakness classification
- nvd@nist.gov: NVD-CWE-noinfo
Primary references
- security-alert@hpe.com — Patch, Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Patch, Vendor Advisory