Is CVE-2021-29219 actively exploited?

No active exploitation of CVE-2021-29219 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2021-29219 be exploited remotely?

No. CVE-2021-29219 requires local access to exploit.

What is the CVSS score of CVE-2021-29219?

CVE-2021-29219 has a CVSS score of 7.8 (HIGH).

HOME VULNERABILITIESCVE-2021-29219

HIGH

CVE-2021-29219

CWE-120Published: February 4, 2022· Updated: Jun 17, 2026

7.8

CVSS v3.1

Official Description

A potential local buffer overflow vulnerability has been identified in HPE FlexNetwork 5130 EL Switch Series version: Prior to 5130_EI_7.10.R3507P02. HPE has made the following software update to resolve the vulnerability in HPE FlexNetwork 5130 EL Switch Series version 5130_EL_7.10.R3507P02.

NVD Source

Technical Analysis

CVE-2021-29219 requires local access, meaning attackers must already have a foothold on the target system.

Exploitation requires low privileges, which limits the exposure to scenarios where an attacker has already gained initial access.

A successful exploit results in complete confidentiality breach (data exposure), full integrity compromise (data manipulation), availability disruption (denial of service), with a CVSS base score of 7.8.

CVSS v3.1 Vector Breakdown

Exploitability

Attack VectorLocal

Attack ComplexityLow

Privileges Req.Low

User InteractionNone

ScopeUnchanged

Impact

ConfidentialityHigh

IntegrityHigh

AvailabilityHigh

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected Vendors & Products

hpe14 product(s)

flexnetwork 5130 jg932a firmwareflexnetwork 5130 jg932aflexnetwork 5130 jg933a firmwareflexnetwork 5130 jg933aflexnetwork 5130 jg934a firmwareflexnetwork 5130 jg934aflexnetwork 5130 jg936a firmwareflexnetwork 5130 jg936aflexnetwork 5130 jg937a firmwareflexnetwork 5130 jg937aflexnetwork 5130 jg940a firmwareflexnetwork 5130 jg940a+2

Source: NVD CPE · 14 total CPE entries