CVE-2021-29218
First published: Fri Feb 04 2022(Updated: )
A local unquoted search path security vulnerability has been identified in HPE Agentless Management Service for Windows version(s): Prior to 1.44.0.0, 10.96.0.0. This vulnerability could be exploited locally by a user with high privileges to execute malware that may lead to a loss of confidentiality, integrity, and availability. HPE has provided software updates to resolve the vulnerability in HPE Agentless Management Service for Windows.
Credit: security-alert@hpe.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| HPE Agentless Management | <1.44.0.0 | |
| Microsoft Windows | ||
| Hpe Proliant Agentless Management | <10.96.0.0 | |
| Hpe Apollo 20 | ||
| Hpe Apollo 2000 Gen 10 Plus | ||
| Hpe Apollo 6500 | ||
| Hpe Apollo 6500 Gen10 Plus | ||
| Hpe Apollo 80 | ||
| Hpe Proliant Dl | ||
| Hpe Proliant Ml | ||
| Hpe Synergy 480 Gen9 | ||
| Hpe Synergy 620 Gen9 | ||
| Hpe Synergy 660 Gen9 | ||
| Hpe Synergy 680 Gen9 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2021-29218?
CVE-2021-29218 is a local unquoted search path security vulnerability identified in HPE Agentless Management Service for Windows.
What versions of HPE Agentless Management are affected by CVE-2021-29218?
Versions prior to 1.44.0.0 of HPE Agentless Management are affected by CVE-2021-29218.
How can CVE-2021-29218 be exploited?
CVE-2021-29218 can be exploited locally by a user with high privileges to execute malware.
What is the severity of CVE-2021-29218?
CVE-2021-29218 has a severity rating of medium.
How can I fix CVE-2021-29218?
To fix CVE-2021-29218, update HPE Agentless Management Service for Windows to version 1.44.0.0 or later.
- collector/nvd-index
- agent/weakness
- agent/severity
- agent/references
- agent/author
- agent/type
- agent/description
- agent/event
- agent/first-publish-date
- agent/softwarecombine
- agent/last-modified-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/hpe
- canonical/hpe agentless management
- vendor/microsoft
- canonical/microsoft windows
- canonical/hpe proliant agentless management
- canonical/hpe apollo 20
- canonical/hpe apollo 2000 gen 10 plus
- canonical/hpe apollo 6500
- canonical/hpe apollo 6500 gen10 plus
- canonical/hpe apollo 80
- canonical/hpe proliant dl
- canonical/hpe proliant ml
- canonical/hpe synergy 480 gen9
- canonical/hpe synergy 620 gen9
- canonical/hpe synergy 660 gen9
- canonical/hpe synergy 680 gen9