CVE-2021-29219

Published: Feb 4, 2022Modified: Jun 17, 2026

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

A potential local buffer overflow vulnerability has been identified in HPE FlexNetwork 5130 EL Switch Series version: Prior to 5130_EI_7.10.R3507P02. HPE has made the following software update to resolve the vulnerability in HPE FlexNetwork 5130 EL Switch Series version 5130_EL_7.10.R3507P02.

Affected (7)

Products: Hpe: Flexnetwork 5130 Jg932a Firmware, Flexnetwork 5130 Jg933a Firmware, Flexnetwork 5130 Jg934a Firmware, Flexnetwork 5130 Jg936a Firmware, Flexnetwork 5130 Jg937a Firmware, Flexnetwork 5130 Jg940a Firmware, Flexnetwork 5130 Jg941a Firmware

Hpe

7 products

Flexnetwork 5130 Jg932a Firmware

Flexnetwork 5130 Jg933a Firmware

Flexnetwork 5130 Jg934a Firmware

Flexnetwork 5130 Jg936a Firmware

Flexnetwork 5130 Jg937a Firmware

Flexnetwork 5130 Jg940a Firmware

Flexnetwork 5130 Jg941a Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hpe Flexnetwork 5130 Jg932a Firmware	Before 5130_ei_7.10.r3507p02

Running on/with	Platform Versions
Hpe Flexnetwork 5130 Jg932a	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hpe Flexnetwork 5130 Jg933a Firmware	Before 5130_ei_7.10.r3507p02

Running on/with	Platform Versions
Hpe Flexnetwork 5130 Jg933a	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hpe Flexnetwork 5130 Jg934a Firmware	Before 5130_ei_7.10.r3507p02

Running on/with	Platform Versions
Hpe Flexnetwork 5130 Jg934a	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hpe Flexnetwork 5130 Jg936a Firmware	Before 5130_ei_7.10.r3507p02

Running on/with	Platform Versions
Hpe Flexnetwork 5130 Jg936a	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hpe Flexnetwork 5130 Jg937a Firmware	Before 5130_ei_7.10.r3507p02

Running on/with	Platform Versions
Hpe Flexnetwork 5130 Jg937a	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hpe Flexnetwork 5130 Jg940a Firmware	Before 5130_ei_7.10.r3507p02

Running on/with	Platform Versions
Hpe Flexnetwork 5130 Jg940a	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hpe Flexnetwork 5130 Jg941a Firmware	Before 5130_ei_7.10.r3507p02

Running on/with	Platform Versions
Hpe Flexnetwork 5130 Jg941a	All versions

Related CWEs

CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow.

References (2)

https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbnw04234en_us

Source: security-alert@hpe.com

PatchVendor Advisory

https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbnw04234en_us

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

Timeline

No history available yet.