Path traversal

The Baseboard Management ControllerBMC in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5800 Gen10 Server BMC firmware has a local spxrestservice deletevideofunc function path traversal...

Path traversal

The Baseboard Management ControllerBMC in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5800 Gen10 Server BMC firmware has a local spxrestservice getvideodatafunc function path traversal...

Buffer overflow

The Baseboard Management ControllerBMC in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5800 Gen10 Server BMC firmware has a local buffer overlfow in spxrestservice setfwimagelocationfunc...

CVE-2021-25135

The Baseboard Management ControllerBMC in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5800 Gen10 Server BMC firmware has a local buffer overlfow in spxrestservice setsmtpfunc function...

CVE-2021-25132

The Baseboard Management ControllerBMC in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5800 Gen10 Server BMC firmware has a local buffer overlfow in spxrestservice setmediaconfigfunc...

CVE-2021-25136

The CVE covers a local buffer overflow in the BMC firmware of HPE Cloudline servers (CL5800 Gen9/Gen10, CL5200 Gen9, CL4100 Gen10, CL3100 Gen10). The vulnerability arises in the spx_restservice setsolvideoremotestorage_func, affecting the Baseboard Management Controller (BMC) firmware. Public exp...

CVE-2021-25135

CVE-2021-25135 affects the BMC firmware in HPE Cloudline models CL5800 (Gen9 and Gen10), CL5200 Gen9, CL4100 Gen10, CL3100 Gen10. The vulnerability is a local buffer overflow in the spx_restservice setsmtp_func function. CVSS metrics indicate HIGH impact ( Confidentiality, Integrity, Availability...

CVE-2021-25133

The Baseboard Management ControllerBMC in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5800 Gen10 Server BMC firmware has a local buffer overlfow in spxrestservice setradiusconfigfunc...

CVE-2021-25132

The Baseboard Management ControllerBMC in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5800 Gen10 Server BMC firmware has a local buffer overlfow in spxrestservice setmediaconfigfunc...

CVE-2021-25127

CVE-2021-25127 affects HPE Cloudline BMC firmware on CL5800 Gen9/Gen10, CL5200 Gen9, CL4100 Gen10, CL3100 Gen10 (and CL5800 Gen10). The vulnerability is a local buffer overflow in the spx_restservice_generatesslcertificate_func, leading to CONFIDENTIALITY, INTEGRITY, and AVAILABILITY impact per C...

CVE-2021-25129

CVE-2021-25129 affects HPE Cloudline BMC firmware across CL5800 (Gen9/Gen10), CL5200 Gen9, CL4100 Gen10, and CL3100 Gen10 models. The vulnerability is a local path-traversal flaw in the spx_restservice getvideodata_func function, as described in multiple sources. No exploit details or active expl...

CVE-2021-25129

The Baseboard Management ControllerBMC in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5800 Gen10 Server BMC firmware has a local spxrestservice getvideodatafunc function path traversal...

CVE-2021-25124

CVE-2021-25124 affects HPE Cloudline BMC firmware across multiple models (CL5800 Gen9/Gen10, CL5200 Gen9, CL4100 Gen10, CL3100 Gen10). It is a local path traversal vulnerability in the spx_restservice deletevideo_func function. CVSSv3.1: score 7.8 (HIGH), vector LV/L/PR:L/UI:N/S:U/C:H/I:H/A:H; au...

CVE-2021-25123

The Baseboard Management ControllerBMC in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5800 Gen10 Server BMC firmware has a local buffer overlfow in spxrestservice addlicensefunc function...

Buffer Error Vulnerability in Multiple HPE Products

HPE Cloudline CL5800 Gen9 Server and others are a dense cloud storage server appliance from HPE America. A buffer error vulnerability exists in multiple HPE Cloudline products, which stems from a local buffer overflow in the spxrestservice setsolvideoremotestoragefunc function. The following...

Buffer Error Vulnerability in Multiple HPE Products

HPE Cloudline CL5800 Gen9 Server and others are a dense cloud storage server appliance from HPE America. A buffer error vulnerability exists in multiple HPE Cloudline products, which stems from a local buffer overflow in the spxrestservice uploadsshkey function. The following products and version...

HPE Cloudline Buffer Error Vulnerability in Multiple Products

HPE Cloudline CL5800 Gen9 Server and others are a dense cloud storage server appliance from HPE America. A buffer error vulnerability exists in multiple HPE Cloudline products, which stems from a local buffer overflow in the spxrestservice setradiusconfigfunc function. The following products and...

Path Traversal Vulnerability in Multiple HPE Products

HPE Cloudline CL5800 Gen9 Server and others are a dense cloud storage server appliance from HPE America. A path traversal vulnerability exists in multiple HPE Cloudline products, which stems from a local buffer overflow in the delsolrecordedvideofunc function. The following products and versions...

Path Traversal Vulnerability in Multiple HPE Products

HPE Cloudline CL5800 Gen9 Server and others are a dense cloud storage server appliance from HPE America. A path traversal vulnerability exists in multiple HPE Cloudline products, which stems from a local buffer overflow in the spxrestservice generatesslcertificatefunc function. The following...

HPESBHF04020 rev.2 - HPE insmod and GRUB2 vulnerability, Local Arbitrary Code Execution

Potential Security Impact: Local: Arbitrary Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Intelligent Provisioning Gen10 and Gen10 Plus Servers - v3.30.226, v3.46, Gen9 - Prior to 2.82, Gen8 - Prior to 1.72 HPE Service Pack for ProLiant Prior to Version 2020.03.2...