Is CVE-2021-29213 actively exploited?

No active exploitation of CVE-2021-29213 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2021-29213 be exploited remotely?

No. CVE-2021-29213 requires local access to exploit.

What is the CVSS score of CVE-2021-29213?

CVE-2021-29213 has a CVSS score of 6.7 (MEDIUM).

HOME VULNERABILITIESCVE-2021-29213

MEDIUM

CVE-2021-29213

NVD-CWE-noinfoPublished: November 1, 2021· Updated: Jun 17, 2026

6.7

CVSS v3.1

Official Description

A potential local bypass of security restrictions vulnerability has been identified in HPE ProLiant DL20 Gen10, HPE ProLiant ML30 Gen10, and HPE ProLiant MicroServer Gen10 Plus server's system ROMs prior to version 2.52. The vulnerability could be locally exploited to cause disclosure of sensitive information, denial of service (DoS), and/or compromise system integrity.

NVD Source

Technical Analysis

CVE-2021-29213 requires local access, meaning attackers must already have a foothold on the target system.

Exploitation requires high privileges, which limits the exposure to scenarios where an attacker has already gained initial access.

A successful exploit results in complete confidentiality breach (data exposure), full integrity compromise (data manipulation), availability disruption (denial of service), with a CVSS base score of 6.7.

CVSS v3.1 Vector Breakdown

Exploitability

Attack VectorLocal

Attack ComplexityLow

Privileges Req.High

User InteractionNone

ScopeUnchanged

Impact

ConfidentialityHigh

IntegrityHigh

AvailabilityHigh

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Affected Vendors & Products

hpe6 product(s)

proliant microserver gen10 plus firmwareproliant microserver gen10 plusproliant ml30 gen10 server firmwareproliant ml30 gen10 serverproliant dl20 gen10 server firmwareproliant dl20 gen10 server

Source: NVD CPE · 6 total CPE entries