CVE-2021-25140

A potential security vulnerability has been identified in the HPE Moonshot Provisioning Manager v1.20. The HPE Moonshot Provisioning Manager is an application that is installed in a VMWare or Microsoft Hyper-V environment that is used to setup and configure an HPE Moonshot 1500 chassis. This...

CVE-2021-25140

The CVE-2021-25140 entry concerns HPE Moonshot Provisioning Manager v1.20, an appliance used in VMware/Hyper‑V environments to configure an HPE Moonshot 1500 chassis. The vulnerability arises from a directory traversal in user-supplied input to the khuploadfile.cgi CGI ELF, which could enable rem...

CVE-2021-25139

A potential security vulnerability has been identified in the HPE Moonshot Provisioning Manager v1.20. The HPE Moonshot Provisioning Manager is an application that is installed in a VMWare or Microsoft Hyper-V environment that is used to setup and configure an HPE Moonshot 1500 chassis. This...

CVE-2021-25139

The CVE-2021-25139 case involves HPE Moonshot Provisioning Manager v1.20, installed in VM- or Hyper‑V environments to configure Moonshot 1500 chassis. The issue is a stack-based buffer overflow triggered by user-supplied input to the khuploadfile.cgi CGI ELF, which could lead to Remote Code Execu...

HPE Apollo 70 Path Traversal Vulnerability

The HPE Apollo 70 system is an Arm-based platform that provides the density and scalability required for large HPC cluster deployments. A path traversal vulnerability exists in the libifc.so webdeletesolvideofile function in the Baseboard Management Controller BMC firmware in HPE Apollo 70 versio...

HPE Apollo 70 Command Injection Vulnerability (CNVD-2021-10577)

The HPE Apollo 70 system is an Arm-based platform that provides the density and scalability required for large HPC cluster deployments. A command injection vulnerability exists in the libifc.so websetdefaultlangcfg function in the Baseboard Management Controller BMC firmware in HPE Apollo 70...

HPE Apollo 70 Path Traversal Vulnerability (CNVD-2021-10582)

The HPE Apollo 70 system is an Arm-based platform that provides the density and scalability required for large HPC cluster deployments. A path traversal vulnerability exists in the libifc.so webdeletevideofile function in the Baseboard Management Controller BMC firmware in HPE Apollo 70 versions...

HPE Apollo 70 Buffer Overflow Vulnerability (CNVD-2021-10579)

The HPE Apollo 70 system is an Arm-based platform that provides the density and scalability required for large HPC cluster deployments. A local buffer overflow vulnerability exists in the libifc.so webifcsetadconfig function in the Baseboard Management Controller BMC firmware in HPE Apollo 70...

HPE Apollo 70 Buffer Overflow Vulnerability (CNVD-2021-10578)

The HPE Apollo 70 system is an Arm-based platform that provides the density and scalability required for large HPC cluster deployments. A local buffer overflow vulnerability exists in the libifc.so websetlicensecfg function in the Baseboard Management Controller BMC firmware in HPE Apollo 70...

HPE Apollo 70 Buffer Overflow Vulnerability (CNVD-2021-10575)

The HPE Apollo 70 system is an Arm-based platform that provides the density and scalability required for large HPC cluster deployments. A local buffer overflow vulnerability exists in the libifc.so webupdatecomponent function in the Baseboard Management Controller BMC firmware in HPE Apollo 70...

HPE Apollo 70 Command Injection Vulnerability

The HPE Apollo 70 system is an Arm-based platform that provides the density and scalability required for large HPC cluster deployments. A command injection vulnerability exists in the libifc.so uploadsshkey function in the Baseboard Management Controller BMC firmware in HPE Apollo 70 versions pri...

HPE Apollo 70 Buffer Overflow Vulnerability (CNVD-2021-10576)

The HPE Apollo 70 system is an Arm-based platform that provides the density and scalability required for large HPC cluster deployments. A local buffer overflow vulnerability exists in the libifc.so websetremoteimageinfo function in the Baseboard Management Controller BMC firmware in HPE Apollo 70...

HPE Apollo 70 Buffer Overflow Vulnerability (CNVD-2021-10581)

The HPE Apollo 70 system is an Arm-based platform that delivers the density and scalability required for large HPC cluster deployments. A local buffer overflow vulnerability exists in the libifc.so webgetactivexcfg function in the Baseboard Management Controller BMC firmware in HPE Apollo 70...

HPE Apollo 70 Buffer Overflow Vulnerability (CNVD-2021-10583)

The HPE Apollo 70 system is an Arm-based platform that provides the density and scalability required for large HPC cluster deployments. A local buffer overflow vulnerability exists in the libifc.so webgeneratesslcfg function in the Baseboard Management Controller BMC firmware in HPE Apollo 70...

HPE Apollo 70 Buffer Overflow Vulnerability

The HPE Apollo 70 system is an Arm-based platform that delivers the density and scalability required for large HPC cluster deployments. A local buffer overflow vulnerability exists in the libifc.so uploadsshkey function in the Baseboard Management Controller BMC firmware in HPE Apollo 70 versions...

HPE Moonshot Provisioning Manager Buffer Error Vulnerability

A buffer error vulnerability in HPE Moonshot Provisioning Manager versions prior to V1.20 can be exploited remotely by an unauthenticated user to cause a stack-based buffer overflow using user-supplied input to the server, which in turn can lead to remote code execution, denial of service, and/or...

HPE Moonshot Provisioning Manager Path Traversal Vulnerability

A path traversal vulnerability in HPE Moonshot Provisioning Manager prior to v1.20, which stems from incorrectly handling user input that results in traversing a directory triggering khuploadfile.cgi, can be exploited by an attacker to cause remote code execution, denial of service, and/or...

HPE Apollo 70 Buffer Overflow Vulnerability (CNVD-2021-10574)

The HPE Apollo 70 system is an Arm-based platform that provides the density and scalability required for large HPC cluster deployments. A local buffer overflow vulnerability exists in the libifc.so websetservicecfg function in the Baseboard Management Controller BMC firmware in HPE Apollo 70...

HPE Apollo 70 Buffer Overflow Vulnerability (CNVD-2021-10580)

The HPE Apollo 70 system is an Arm-based platform that provides the density and scalability required for large HPC cluster deployments. A local buffer overflow vulnerability exists in the libifc.so webgetactivexcfg function in the Baseboard Management Controller BMC firmware in HPE Apollo 70...

HPE Apollo 70 Buffer Overflow Vulnerability (CNVD-2021-10573)

The HPE Apollo 70 system is an Arm-based platform that provides the density and scalability required for large HPC cluster deployments. A local buffer overflow vulnerability exists in the libifc.so webstartflash function in the Baseboard Management Controller BMC firmware in HPE Apollo 70 version...