Vulnerability · Published Dec 10, 2021 · Assigned by hpe
CVE-2021-29214
High 7.2
In plain English
A high-severity security flaw in HPE StoreServ Management Console (SSMC); HPE 3PAR StoreServ Management and Core Software Media. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.1% (higher than 66% of all known vulnerabilities).
Official description
A security vulnerability has been identified in HPE StoreServ Management Console (SSMC). An authenticated SSMC administrator could exploit the vulnerability to inject code and elevate their privilege in SSMC. The scope of this vulnerability is limited to SSMC. Note: The arrays being managed are not impacted by this vulnerability. This vulnerability impacts SSMC versions 3.4 GA to 3.8.1.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| n/a | HPE StoreServ Management Console (SSMC); HPE 3PAR StoreServ Management and Core Software Media | 3.4 GA to 3.8.1 |