CVE-2021-25128

The Baseboard Management ControllerBMC in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5800 Gen10 Server BMC firmware has a local spxrestservice gethelpdatafunc function path traversal...

CVE-2021-25128

The CVE-2021-25128 entry concerns a local path traversal in the BMC firmware of HPE Cloudline devices (GEN9 GEN10) via the spx_restservice gethelpdata_func function. Affected products include HPE Cloudline CL5800/CL5200 GEN9 and CL4100/CL3100/CL5800 GEN10 servers. The exposed component is the BMC...

HPESBHF04073 rev.1 - HPE Cloudline BMC firmware, Multiple Local Vulnerabilities

Potential Security Impact: Local: Denial of Service DoS, Directory Traversal, Buffer Overflow SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Cloudline CL5800 Gen10 Server Version 1.08.0.0 HPE Cloudline CL3100 Gen10 Server Version 1.10.0.0 - Version 1.08.0.0 for Cascade Lake H...