CVE-2021-42775

—

CVSS 3.1

9.1 critical

EPSS

<1%p60

Published

Nov 12, 2021 (Nov 12, 2021)

Modified

Jun 17, 2026

Description

Broadcom Emulex HBA Manager/One Command Manager versions before 11.4.425.0 and 12.8.542.31, if not installed in Strictly Local Management mode, have a vulnerability in the remote firmware download feature that could allow a user to place or replace an arbitrary file on the remote host. In non-secure mode, the user is unauthenticated.

Vendors: broadcom
Products: emulex hba manager
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.0%)

In the news0 stories

No ingested article mentions this CVE yet.