CVE-2021-42772: Broadcom Emulex Hba Manager

Critical severity, CVSS 9.8. EPSS: 1.3% chance of exploitation in the next 30 days.

Broadcom Emulex HBA Manager/One Command Manager versions before 11.4.425.0 and 12.8.542.31, if not installed in Strictly Local Management mode, have a buffer overflow vulnerability in the remote GetDumpFile command that could allow a user to attempt various attacks. In non-secure mode, the user is unauthenticated

Affected products

• Broadcom Emulex Hba Manager: before 11.4.425.0 (fixed in 11.4.425.0)
• Broadcom One Command Manager: before 12.8.542.31 (fixed in 12.8.542.31)

Published 2021-11-03. Last modified 2026-06-17.