CVE-2021-25123: Buffer Overflow

Published Jan 29, 2021

Updated

The Baseboard Management Controller(BMC) in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5800 Gen10 Server BMC firmware has a local buffer overlfow in spxrestservice addlicensefunc function.

Affected Software

10 affected components

HPE Cloudline Cl5800 Gen10 Server Firmware=1.08.0.0

HPE Cloudline CL5800 Gen10 Server

HPE Cloudline Cl3100 Gen10 Server Firmware=1.10.0.0

HPE Cloudline CL3100 Gen10 Server

HPE Cloudline Cl4100 Gen10 Server Firmware=1.10.0.0

HPE Cloudline CL4100 Gen10 Server

HPE Cloudline Cl5200 Gen9 Server Firmware=1.07.0.0

HPE Cloudline CL5200 Gen9 Server

HPE Cloudline Cl5800 Gen9 Server Firmware=1.09.0.0

HPE Cloudline CL5800 Gen9 Server

Event History

Jan 29, 2021

CVE Published

via MITRE·12:30 PM

Data Sourced

via MITRE·12:30 PM

DescriptionWeakness

Frequently Asked Questions

What is the vulnerability ID of this issue?

The vulnerability ID is CVE-2021-25123.

What is the severity level of CVE-2021-25123?

The severity level of CVE-2021-25123 is high with a severity value of 7.8.

Which software versions are affected by CVE-2021-25123?

HPE Cloudline CL5800 Gen10 Server Firmware version 1.08.0.0 and HPE Cloudline CL3100 Gen10 Server Firmware version 1.10.0.0 are affected by this vulnerability.

How can I fix CVE-2021-25123?

To fix CVE-2021-25123, update the firmware of HPE Cloudline CL5800 Gen10 Server to version 1.08.0.1 and HPE Cloudline CL3100 Gen10 Server to version 1.10.0.1.

Where can I find more information about CVE-2021-25123?

You can find more information about CVE-2021-25123 on the HPE Support website.