CVE-2021-29219
High
Description
A potential local buffer overflow vulnerability has been identified in HPE FlexNetwork 5130 EL Switch Series version: Prior to 5130_EI_7.10.R3507P02. HPE has made the following software update to resolve the vulnerability in HPE FlexNetwork 5130 EL Switch Series version 5130_EL_7.10.R3507P02.
SeverityHigh
CVSS7.8
Exploit probability—
ProductHpe Flexnetwork 5130 Jg932a Firmware
PublishedFeb 4, 2022
First seenFeb 4, 2022
How to fix
Update
- hpe flexnetwork_5130_jg932a_firmware5130_ei_7.10.r3507p02 or later
- hpe flexnetwork_5130_jg933a_firmware5130_ei_7.10.r3507p02 or later
- hpe flexnetwork_5130_jg934a_firmware5130_ei_7.10.r3507p02 or later
- hpe flexnetwork_5130_jg936a_firmware5130_ei_7.10.r3507p02 or later
- hpe flexnetwork_5130_jg937a_firmware5130_ei_7.10.r3507p02 or later
- hpe flexnetwork_5130_jg940a_firmware5130_ei_7.10.r3507p02 or later
- hpe flexnetwork_5130_jg941a_firmware5130_ei_7.10.r3507p02 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| hpe flexnetwork_5130_jg932a_firmware | v < 5130_ei_7.10.r3507p02 | 5130_ei_7.10.r3507p02 |
| hpe flexnetwork_5130_jg933a_firmware | v < 5130_ei_7.10.r3507p02 | 5130_ei_7.10.r3507p02 |
| hpe flexnetwork_5130_jg934a_firmware | v < 5130_ei_7.10.r3507p02 | 5130_ei_7.10.r3507p02 |
| hpe flexnetwork_5130_jg936a_firmware | v < 5130_ei_7.10.r3507p02 | 5130_ei_7.10.r3507p02 |
| hpe flexnetwork_5130_jg937a_firmware | v < 5130_ei_7.10.r3507p02 | 5130_ei_7.10.r3507p02 |
| hpe flexnetwork_5130_jg940a_firmware | v < 5130_ei_7.10.r3507p02 | 5130_ei_7.10.r3507p02 |
| hpe flexnetwork_5130_jg941a_firmware | v < 5130_ei_7.10.r3507p02 | 5130_ei_7.10.r3507p02 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.