CVE-2021-29214

HighCVSS 7.2/10Last modified Jun 17, 2026

Description

A security vulnerability has been identified in HPE StoreServ Management Console (SSMC). An authenticated SSMC administrator could exploit the vulnerability to inject code and elevate their privilege in SSMC. The scope of this vulnerability is limited to SSMC. Note: The arrays being managed are not impacted by this vulnerability. This vulnerability impacts SSMC versions 3.4 GA to 3.8.1.

Metrics

CVSS 3.1 7.2/10CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Affected software

No affected versions have been published.

Timeline

Published
Dec 10, 2021
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-292159.8A potential security vulnerability in HPE Ezmeral Data Fabric that may allow a remote access restriction bypass in the TEZ MapR ecosystem coCVE-2021-292166.1A remote cross-site scripting vulnerability was discovered in HPE OneView Global Dashboard version(s): Prior to 2.5. HPE has provided a softCVE-2021-292176.1A remote URL redirection vulnerability was discovered in HPE OneView Global Dashboard version(s): Prior to 2.5. HPE has provided a software CVE-2021-292186.7A local unquoted search path security vulnerability has been identified in HPE Agentless Management Service for Windows version(s): Prior toCVE-2021-292197.8A potential local buffer overflow vulnerability has been identified in HPE FlexNetwork 5130 EL Switch Series version: Prior to 5130_EI_7.10.CVE-2021-292207.2Multiple buffer overflow security vulnerabilities have been identified in HPE iLO Amplifier Pack version(s): Prior to 2.12. These vulnerabilCVE-2021-292217.0A local privilege escalation vulnerability was discovered in Erlang/OTP prior to version 23.2.3. By adding files to an existing installationCVE-2021-292388.8CODESYS Automation Server before 1.16.0 allows cross-site request forgery (CSRF).CVE-2021-292397.8CODESYS Development System 3 before 3.5.17.0 displays or executes malicious documents or files embedded in libraries without first checking CVE-2021-292407.8The Package Manager of CODESYS Development System 3 before 3.5.17.0 does not check the validity of packages before installation and may be uCVE-2021-292417.5CODESYS Gateway 3 before 3.5.16.70 has a NULL pointer dereference that may result in a denial of service (DoS).CVE-2021-292427.3CODESYS Control Runtime system before 3.5.17.0 has improper input validation. Attackers can send crafted communication packets to change the
CVE-2021-29214: High severity, CVSS 7.2 | Vulnix