TI-2021-10033 Aliases CVE-2021-29203 GHSA-cp6r-8qhx-6m32

Missing authentication in HPE Edgeline Infrastructure Management Software

HIGH 79CWE-306Published 2021-05-06 · Updated 2024-08-03

Key facts

Attack vector: Network
Privileges required: None
User interaction: None
Attack complexity: Low
Impact type: Security bypass
Confidentiality · integrity · availability: High · High · High
Fix status: No fix listed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-306.

Summary

A security vulnerability has been identified in the HPE Edgeline Infrastructure Manager, also known as HPE Edgeline Infrastructure Management Software, prior to version 1.22. The vulnerability could be remotely exploited to bypass remote authentication leading to execution of arbitrary commands, gaining privileged access, causing denial of service, and changing the configuration. HPE has released a software update to resolve the vulnerability in the HPE Edgeline Infrastructure Manager.

Why it matters now

EPSS 0.68293 99th percentileScored 2026-11-07

Public exploit Yes 1 exploit referenceTagged by NVD

Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
—	HPE Edgeline Infrastructure Management Software	Prior to version 1.22	—	No fix listed	CNA

HPE Edgeline Infrastructure Management Software Vendor— Affected Prior to version 1.22 Fixed in — No fix listed CNA

CPE configurations NVD · 1

CPE	Versions	Role	Vendor
cpe:2.3:a:hp:edgeline_infrastructure_manager::::::::	before 1.22	Vulnerable	Hewlett Packard Enterprise

cpe:2.3:a:hp:edgeline_infrastructure_manager:*:*:*:*:*:*:*:* Versions before 1.22 Vulnerable ·Hewlett Packard Enterprise

Remediation

No fixed version listed by the sources yet.

Timeline

2026-10-02 Threatist record created from CVE-2021-29203
2026-10-03 Alias added: GHSA-cp6r-8qhx-6m32

References

Exploit 1

https://www.tenable.com/security/research/tra-2021-15

Advisory 1

https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn04124en_us

TI-2020-05811 Improper authentication in HPE Edgeline Infrastructure Management Software CVSS 3.1CRITICAL 9.8

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences