CVE-2021-25129

CVE-2021-25129 affects HPE Cloudline BMC firmware across CL5800 (Gen9/Gen10), CL5200 Gen9, CL4100 Gen10, and CL3100 Gen10 models. The vulnerability is a local path-traversal flaw in the spx_restservice getvideodata_func function, as described in multiple sources. No exploit details or active expl...

CVE-2021-25125

The CVE-2021-25125 entry concerns the Baseboard Management Controller (BMC) firmware in HPE Cloudline models CL5800/CL5200 Gen9, CL4100/CL3100 Gen10, and CL5800 Gen10. The vulnerability is a local path traversal in the spx_restservice delsolrecordedvideo_func function. This represents a vulnerabl...

CVE-2021-25125

The Baseboard Management ControllerBMC in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5800 Gen10 Server BMC firmware has a local spxrestservice delsolrecordedvideofunc function path...

CVE-2021-25126

The Baseboard Management ControllerBMC in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5800 Gen10 Server BMC firmware has a local buffer overlfow in spxrestservice downloadkvmjnlpfunc...

CVE-2021-25126

The CVE-2021-25126 issue affects HPE Cloudline BMC firmware across CL5800 Gen9/Gen10, CL5200 Gen9, CL4100 Gen10, and CL3100 Gen10. Root cause is a local buffer overflow in spx_restservice’s downloadkvmjnlp_func function. The NVD notes high impact with complete confidentiality, integrity, and avai...

CVE-2021-25124

The Baseboard Management ControllerBMC in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5800 Gen10 Server BMC firmware has a local spxrestservice deletevideofunc function path traversal...

CVE-2021-25124

CVE-2021-25124 affects HPE Cloudline BMC firmware across multiple models (CL5800 Gen9/Gen10, CL5200 Gen9, CL4100 Gen10, CL3100 Gen10). It is a local path traversal vulnerability in the spx_restservice deletevideo_func function. CVSSv3.1: score 7.8 (HIGH), vector LV/L/PR:L/UI:N/S:U/C:H/I:H/A:H; au...

CVE-2021-25123

The Baseboard Management ControllerBMC in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5800 Gen10 Server BMC firmware has a local buffer overlfow in spxrestservice addlicensefunc function...

CVE-2021-25123

The Baseboard Management ControllerBMC in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5800 Gen10 Server BMC firmware has a local buffer overlfow in spxrestservice addlicensefunc function...

CVE-2021-25123

The Baseboard Management ControllerBMC in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5800 Gen10 Server BMC firmware has a local buffer overlfow in spxrestservice addlicensefunc function...

CVE-2021-25132: Buffer Copy without Checking Size of Input

The Baseboard Management ControllerBMC in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5800 Gen10 Server BMC firmware has a local buffer overlfow in spxrestservice setmediaconfigfunc...

CVE-2021-25135: Buffer Copy without Checking Size of Input

The Baseboard Management ControllerBMC in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5800 Gen10 Server BMC firmware has a local buffer overlfow in spxrestservice setsmtpfunc function...

CVE-2021-25137: Buffer Copy without Checking Size of Input

The Baseboard Management ControllerBMC in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5800 Gen10 Server BMC firmware has a local buffer overlfow in spxrestservice startflashfunc function...

CVE-2021-25136: Buffer Copy without Checking Size of Input

The Baseboard Management ControllerBMC in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5800 Gen10 Server BMC firmware has a local buffer overlfow in spxrestservice...

Buffer Error Vulnerability in Multiple HPE Products

HPE Cloudline CL5800 Gen9 Server and others are a dense cloud storage server appliance from HPE America. A buffer error vulnerability exists in several HPE Cloudline products, which stems from a local buffer overflow in the spxrestservice startflashfunc function. The following products and versio...

CVE-2021-25138: Buffer Copy without Checking Size of Input

The Baseboard Management ControllerBMC in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5800 Gen10 Server BMC firmware has a local buffer overlfow in spxrestservice uploadsshkey function...

CVE-2021-25130: Buffer Copy without Checking Size of Input

The Baseboard Management ControllerBMC in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5800 Gen10 Server BMC firmware has a local buffer overlfow in spxrestservice setactdirfunc function...

CVE-2021-25126: Buffer Copy without Checking Size of Input

The Baseboard Management ControllerBMC in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5800 Gen10 Server BMC firmware has a local buffer overlfow in spxrestservice downloadkvmjnlpfunc...

Buffer Error Vulnerability in Multiple HPE Products

HPE Cloudline CL5800 Gen9 Server and others are a dense cloud storage server appliance from HPE America. A buffer error vulnerability exists in multiple HPE Cloudline products, which stems from a local buffer overflow in the spxrestservice setsolvideoremotestoragefunc function. The following...

CVE-2020-5633

Multiple NEC products Express5800/T110j, Express5800/T110j-S, Express5800/T110j 2nd-Gen, Express5800/T110j-S 2nd-Gen, iStorage NS100Ti, and Express5800/GT110j where Baseboard Management Controller BMC firmware Rev1.09 and earlier is applied allows remote attackers to bypass authentication and the...