Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2021-29662

25
FAUCET Score

CVE-2021-29662 describes an IP address validation bypass vulnerability in the Data::Validate::IP Perl module (versions through 0.29), which also impacts products like NetApp SnapCenter. This flaw allows attackers to bypass IP-based access controls by using extraneous zero characters in IP address strings. With a CVSS score of 7.5 (HIGH), it is easily exploitable over the network with low attack complexity, potentially leading to high integrity impacts without requiring user interaction. While there is no known active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered some community discussion and media coverage, indicating awareness despite its inactive status on the CISA KEV catalog.

Impacted Technologies

VendorProductVersion(s)CPE
<= 0.29CPE matchmatch criteria
cpe:2.3:a:data\:\:validate\:\:ip_project:data\:\:validate\:\:ip:*:*:*:*:*:perl:*:*
Range not provided by sourceCPE matchmatch criteria
cpe:2.3:a:netapp:snapcenter:-:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 3.1

7.5HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
Exploitability Score
3.9
Impact Score
3.6
CvssVersion
3.1

Exploit Intelligence

EPSS Score
2.22%
Probability of exploitation in next 30 days
EPSS Percentile
80.8%
Percentile rank of EPSS score among Peer Group
As of 2026-07-27
Model: v2026.06.15
This CVE's current EPSS score of 0.0222 is in the 66th percentile among its peer group of 51,506 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.

Media Mentions

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (1)

github_advisorypatch availablevia nvd_reference
View patch

References

blog.urth.org / 2021/03/29/security-issues-in-perl-ip-address-distros
ExploitThird Party Advisory
github.com / houseabsolute/Data-Validate-IP
ProductThird Party Advisory
github.com / houseabsolute/Data-Validate-IP/commit/3bba13c819d616514a75e089badd75002fd4f14e
PatchThird Party Advisory
github.com / sickcodes/security/blob/master/advisories/SICK-2021-018.md
ExploitThird Party Advisory
security.netapp.com / advisory/ntap-20210604-0002
Third Party Advisory
sick.codes / sick-2021-018
ExploitThird Party Advisory