Local Buffer Overflow in HPE Cloudline Server BMC Firmware
CVE-2021-25138

7.8HIGH

Key Information:

Vendor

HP
Status
HP Cloudline Cl5800 Gen9 Server; HP Cloudline Cl5200 Gen9 Server; HP Cloudline Cl4100 Gen10 Server; HP Cloudline Cl3100 Gen10 Server; HP Cloudline Cl5800 Gen10 Server
Vendor
CVE Published:
29 January 2021

What is CVE-2021-25138?

A local buffer overflow vulnerability exists in the Baseboard Management Controller (BMC) firmware for HPE Cloudline servers. An attacker with local access can exploit the 'uploadsshkey' function of spx_restservice, potentially allowing unauthorized actions on the affected system. It is crucial for users to apply the latest firmware updates to mitigate risks associated with this vulnerability.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5800 Gen10 Server Version. 1.09.0.0

HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5800 Gen10 Server Version 1.07.0.0

HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5800 Gen10 Server Version 1.10.0.0

References

https://support.hpe.com/hpsc/doc/public/display?docLocale...
x_refsource_MISC

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.