Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2021-25136

The Baseboard Management Controller(BMC) in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5800 Gen10 Server BMC firmware has a local buffer overlfow in spx_restservice setsolvideoremotestorage_func function.

Published

2021-01-29T19:15:14.223

Last Modified

2024-11-21T05:54:25.403

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 7.8 (HIGH)

CVSSv2 Vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

  • Access Vector: LOCAL
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: COMPLETE
  • Integrity Impact: COMPLETE
  • Availability Impact: COMPLETE
Exploitability Score

3.9

Impact Score

10.0

Weaknesses
  • Type: Primary
    CWE-120
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System hpe cloudline_cl3100_gen10_server_firmware 1.08.0.0 Yes
Operating System hpe cloudline_cl3100_gen10_server_firmware 1.10.0.0 Yes
Hardware hpe cloudline_cl3100_gen10_server - No
Operating System hpe cloudline_cl4100_gen10_server_firmware 1.08.0.0 Yes
Operating System hpe cloudline_cl4100_gen10_server_firmware 1.10.0.0 Yes
Hardware hpe cloudline_cl4100_gen10_server - No
Operating System hpe cloudline_cl5200_gen9_server_firmware 1.07.0.0 Yes
Hardware hpe cloudline_cl5200_gen9_server - No
Operating System hpe cloudline_cl5800_gen10_server_firmware 1.08.0.0 Yes
Hardware hpe cloudline_cl5800_gen10_server - No
Operating System hpe cloudline_cl5800_gen9_server_firmware 1.09.0.0 Yes
Hardware hpe cloudline_cl5800_gen9_server - No
References