CVE-2021-25138
High
Description
The Baseboard Management Controller(BMC) in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5800 Gen10 Server BMC firmware has a local buffer overlfow in spx_restservice uploadsshkey function.
SeverityHigh
CVSS7.8
Exploit probability—
ProductHpe Cloudline Cl3100 Gen10 Server Firmware
PublishedJan 29, 2021
First seenJan 29, 2021
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| hpe cloudline_cl3100_gen10_server_firmware | 1.08.0.0, 1.10.0.0 | — |
| hpe cloudline_cl4100_gen10_server_firmware | 1.08.0.0, 1.10.0.0 | — |
| hpe cloudline_cl5200_gen9_server_firmware | 1.07.0.0 | — |
| hpe cloudline_cl5800_gen10_server_firmware | 1.08.0.0 | — |
| hpe cloudline_cl5800_gen9_server_firmware | 1.09.0.0 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.