CVE-2018-7073

CVE-2018-7073 affects HPE Moonshot Provisioning Manager prior to v1.24. It is a local arbitrary file modification vulnerability in the provisioning manager (component: Moonshot Provisioning Manager) where a local attacker could modify arbitrary files. CVSS shows base score 5.5 (Medium) with local...

CVE-2018-7072

CVE-2018-7072 affects HPE Moonshot Provisioning Manager prior to v1.24. Multiple sources (NVD entry; CNVD-2019-03329) describe a remote bypass of security restrictions in the product. The vulnerability is exposed remotely (no authentication required per CVSS) and can allow bypass of protection me...

CVE-2021-25139

The CVE-2021-25139 case involves HPE Moonshot Provisioning Manager v1.20, installed in VM- or Hyper‑V environments to configure Moonshot 1500 chassis. The issue is a stack-based buffer overflow triggered by user-supplied input to the khuploadfile.cgi CGI ELF, which could lead to Remote Code Execu...

CVE-2021-25140

The CVE-2021-25140 entry concerns HPE Moonshot Provisioning Manager v1.20, an appliance used in VMware/Hyper‑V environments to configure an HPE Moonshot 1500 chassis. The vulnerability arises from a directory traversal in user-supplied input to the khuploadfile.cgi CGI ELF, which could enable rem...