CVE-2021-42772 describes a critical buffer overflow vulnerability in Broadcom Emulex HBA Manager and One Command Manager versions prior to 11.4.425.0 and 12.8.542.31, specifically when not installed in Strictly Local Management mode. This flaw, residing in the remote GetDumpFile command, allows unauthenticated attackers in non-secure mode to execute arbitrary code or cause denial of service. With a CVSS score of 9.8 (Critical), this vulnerability presents a significant risk due to its network-based attack vector, low attack complexity, and potential for complete compromise of confidentiality, integrity, and availability. Currently, there is no public exploit code available (Metasploit, Nuclei, ExploitDB), nor is it listed in the CISA KEV catalog, indicating no active exploitation. Community discussion and media coverage are also minimal.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
< 11.4.425.0CPE matchmatch criteria | cpe:2.3:a:broadcom:emulex_hba_manager:*:*:*:*:*:*:*:* | ||
< 12.8.542.31CPE matchmatch criteria | cpe:2.3:a:broadcom:one_command_manager:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.3 Bluesky, 0.3 Mastodon, and 2.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.