CVE-2021-25139

A potential security vulnerability has been identified in the HPE Moonshot Provisioning Manager v1.20. The HPE Moonshot Provisioning Manager is an application that is installed in a VMWare or Microsoft Hyper-V environment that is used to setup and configure an HPE Moonshot 1500 chassis. This...

CVE-2021-25140

A potential security vulnerability has been identified in the HPE Moonshot Provisioning Manager v1.20. The HPE Moonshot Provisioning Manager is an application that is installed in a VMWare or Microsoft Hyper-V environment that is used to setup and configure an HPE Moonshot 1500 chassis. This...

Directory traversal

A potential security vulnerability has been identified in the HPE Moonshot Provisioning Manager v1.20. The HPE Moonshot Provisioning Manager is an application that is installed in a VMWare or Microsoft Hyper-V environment that is used to setup and configure an HPE Moonshot 1500 chassis. This...

Stack overflow

A potential security vulnerability has been identified in the HPE Moonshot Provisioning Manager v1.20. The HPE Moonshot Provisioning Manager is an application that is installed in a VMWare or Microsoft Hyper-V environment that is used to setup and configure an HPE Moonshot 1500 chassis. This...

CVE-2021-25140

A potential security vulnerability has been identified in the HPE Moonshot Provisioning Manager v1.20. The HPE Moonshot Provisioning Manager is an application that is installed in a VMWare or Microsoft Hyper-V environment that is used to setup and configure an HPE Moonshot 1500 chassis. This...

CVE-2021-25140

The CVE-2021-25140 entry concerns HPE Moonshot Provisioning Manager v1.20, an appliance used in VMware/Hyper‑V environments to configure an HPE Moonshot 1500 chassis. The vulnerability arises from a directory traversal in user-supplied input to the khuploadfile.cgi CGI ELF, which could enable rem...

CVE-2021-25139

A potential security vulnerability has been identified in the HPE Moonshot Provisioning Manager v1.20. The HPE Moonshot Provisioning Manager is an application that is installed in a VMWare or Microsoft Hyper-V environment that is used to setup and configure an HPE Moonshot 1500 chassis. This...

CVE-2021-25139

The CVE-2021-25139 case involves HPE Moonshot Provisioning Manager v1.20, installed in VM- or Hyper‑V environments to configure Moonshot 1500 chassis. The issue is a stack-based buffer overflow triggered by user-supplied input to the khuploadfile.cgi CGI ELF, which could lead to Remote Code Execu...

HPE Moonshot Provisioning Manager Buffer Error Vulnerability

A buffer error vulnerability in HPE Moonshot Provisioning Manager versions prior to V1.20 can be exploited remotely by an unauthenticated user to cause a stack-based buffer overflow using user-supplied input to the server, which in turn can lead to remote code execution, denial of service, and/or...

HPE Moonshot Provisioning Manager Path Traversal Vulnerability

A path traversal vulnerability in HPE Moonshot Provisioning Manager prior to v1.20, which stems from incorrectly handling user input that results in traversing a directory triggering khuploadfile.cgi, can be exploited by an attacker to cause remote code execution, denial of service, and/or...

(0Day) Hewlett Packard Enterprise Moonshot Provisioning Manager khuploadfile Directory Traversal Remote Code Execution Vulnerability

This vulnerability allows remote attackers to create arbitrary files on affected installations of Hewlett Packard Enterprise Moonshot Provisioning Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within the khuploadfile.cgi binary. The issue results...

(0Day) Hewlett Packard Enterprise Moonshot Provisioning Manager khuploadfile Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hewlett Packard Enterprise Moonshot Provisioning Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within the khuploadfile.cgi binary. The issue results...

fence security update

CentOS Errata and Security Advisory CESA-2020:5003 An update for fence-agents is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

HP iLO 3 < 1.93 / HP iLO 4 < 2.75 / HP iLO Superdome 4 < 1.64 / HP iLO 5 < 2.18 / HP Moonshot/Edgeline iLO 5 < 2.30 Ripple20 Multiple vulnerabilities

Multiple security vulnerabilities have been identified in Integrated Lights-Out firmware generation 3 iLO 3 prior to version 1.93, generation 4 iLO 4 prior to version 2.75, and generation 5 iLO 5 prior to version 2.18. Superdome generation 4 versions prior to 1.64 and Moonshot/Edgeline generation...

HPE Moonshot Provisioning Manager Appliance Directory Traversal (CVE-2017-8976)

A directory traversal vulnerability exists in HPE Moonshot Provisioning Manager Appliance. The vulnerability is due to an input validation flaw when processing parameter. Successful exploitation could result in arbitrary code execution...

HPE Moonshot Provisioning Manager Appliance Directory Traversal (CVE-2017-8977)

A directory traversal vulnerability exists in HPE Moonshot Provisioning Manager Appliance. The vulnerability is due to missing input validation in the serverresponse.py script. Successful exploitation could result in arbitrary file overwrite with privileges of web application process...

HPE Moonshot Provision Manager Detection (HTTP)

Detection of HPE Moonshot Provision Manager. The script sends a connection request to the server and attempts to detect HPE Moonshot Provision Manager. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Beers with Talos EP42: To the Moon, Everyone!

Beers with Talos BWT Podcast Ep. 42 is now available. Download this episode and subscribe to Beers with Talos: If iTunes and Google Play aren't your thing, click here. Ep. 42 show notes: Recorded Nov. 16, 2018. Cyber moonshot, baby! It’s just like that time the U.S. raced everyone to the moon,...

HPESBHF03866 rev.3 - HPE Integrated Lights-Out 3,4,5 iLO Moonshot and Moonshot iLO Chassis Manager, using SSH, Remote Execution of Arbitrary Code, Local Disclosure of Sensitive Information

Potential Security Impact: Local: Disclosure of Sensitive Information; Remote: Arbitrary Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Integrated Lights-Out 5 iLO 5 for HPE Gen10 Servers - Prior to v1.35 HPE Integrated Lights-Out 4 iLO 4 - Prior to v2.61 HPE...

Denial of Service Vulnerability in Multiple HPE Products

HPE Integrated Lights-Out, Moonshot Chassis Manager, and Moonshot Component Pack are all products of Hewlett Packard Enterprise HPE, U.S.A. HPE Integrated Lights-Out iLO is an embedded server management technology that monitors and maintains servers, controls servers remotely, and more through an...