CVE-2021-25138

The Baseboard Management ControllerBMC in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5800 Gen10 Server BMC firmware has a local buffer overlfow in spxrestservice uploadsshkey function...

CVE-2021-25136

The Baseboard Management ControllerBMC in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5800 Gen10 Server BMC firmware has a local buffer overlfow in spxrestservice...

CVE-2021-25130

The Baseboard Management ControllerBMC in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5800 Gen10 Server BMC firmware has a local buffer overlfow in spxrestservice setactdirfunc function...

Path traversal

The Baseboard Management ControllerBMC in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5800 Gen10 Server BMC firmware has a local spxrestservice getvideodatafunc function path traversal...

CVE-2021-25136

The CVE covers a local buffer overflow in the BMC firmware of HPE Cloudline servers (CL5800 Gen9/Gen10, CL5200 Gen9, CL4100 Gen10, CL3100 Gen10). The vulnerability arises in the spx_restservice setsolvideoremotestorage_func, affecting the Baseboard Management Controller (BMC) firmware. Public exp...

CVE-2021-25135

CVE-2021-25135 affects the BMC firmware in HPE Cloudline models CL5800 (Gen9 and Gen10), CL5200 Gen9, CL4100 Gen10, CL3100 Gen10. The vulnerability is a local buffer overflow in the spx_restservice setsmtp_func function. CVSS metrics indicate HIGH impact ( Confidentiality, Integrity, Availability...

CVE-2021-25129

CVE-2021-25129 affects HPE Cloudline BMC firmware across CL5800 (Gen9/Gen10), CL5200 Gen9, CL4100 Gen10, and CL3100 Gen10 models. The vulnerability is a local path-traversal flaw in the spx_restservice getvideodata_func function, as described in multiple sources. No exploit details or active expl...

Path Traversal Vulnerability in Multiple HPE Products

HPE Cloudline CL5800 Gen9 Server and others are a dense cloud storage server appliance from HPE America. A path traversal vulnerability exists in multiple HPE Cloudline products, which stems from a local buffer overflow in the spxrestservice generatesslcertificatefunc function. The following...