PT-2021-7279 · Hewlett Packard · Hpe Ilo Amplifier Pack

Nikita Abramov · Published 2021-11-19 · Updated 2022-03-07 · CVE-2021-29220

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions HPE iLO Amplifier Pack versions prior to 2.12

Description The issue is related to buffer overflow security vulnerabilities in the HPE iLO Amplifier Pack, which could allow a highly privileged user to remotely execute code, leading to a loss of confidentiality, integrity, and availability. The exploitation of this issue may impact the privacy, integrity, and availability of protected information.

Recommendations For HPE iLO Amplifier Pack versions prior to 2.12, update to version 2.12 or later to resolve the vulnerability. As a temporary workaround, consider restricting access to the HPE iLO Amplifier Pack to minimize the risk of exploitation.

Fix

Buffer Overflow

Weakness Enumeration

CWE-120

Related Identifiers

BDU:2022-05030

CVE-2021-29220

Affected Products

Hpe Ilo Amplifier Pack

References · 9

• https://osv.dev/vulnerability/CVE-2021-29220 · Vendor Advisory
• https://bdu.fstec.ru/vul/2022-05030 · Security Note
• https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn04246en_us · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-29220 · Security Note
• https://t.me/cvenotify/27322 · Telegram Post
• https://t.me/cibsecurity/38065 · Telegram Post
• https://support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&docId=emr_na-hpesbgn04246en_us · Note
• https://t.me/cvenotify/27848 · Telegram Post
• https://support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&docId=emr_na-hpesbgn04246en_us · Note