CVE-2021-25125: Path Traversal

Published Jan 29, 2021

Updated

The Baseboard Management Controller(BMC) in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5800 Gen10 Server BMC firmware has a local spxrestservice delsolrecordedvideofunc function path traversal vulnerability.

Affected Software

12 affected components

HPE Cloudline Cl3100 Gen10 Server Firmware=1.08.0.0

HPE Cloudline Cl3100 Gen10 Server Firmware=1.10.0.0

HPE Cloudline CL3100 Gen10 Server

HPE Cloudline Cl4100 Gen10 Server Firmware=1.08.0.0

HPE Cloudline Cl4100 Gen10 Server Firmware=1.10.0.0

HPE Cloudline CL4100 Gen10 Server

HPE Cloudline Cl5200 Gen9 Server Firmware=1.07.0.0

HPE Cloudline CL5200 Gen9 Server

HPE Cloudline Cl5800 Gen10 Server Firmware=1.08.0.0

HPE Cloudline CL5800 Gen10 Server

HPE Cloudline Cl5800 Gen9 Server Firmware=1.09.0.0

HPE Cloudline CL5800 Gen9 Server

Event History

Jan 29, 2021

CVE Published

via MITRE·06:10 PM

Data Sourced

via MITRE·06:10 PM

DescriptionWeakness

Frequently Asked Questions

What is the vulnerability ID of this issue?

The vulnerability ID of this issue is CVE-2021-25125.

What is the severity of CVE-2021-25125?

The severity of CVE-2021-25125 is high with a severity value of 7.8.

What is the affected software?

The affected software includes HPE Cloudline CL5800 Gen9 Server, HPE Cloudline CL5200 Gen9 Server, HPE Cloudline CL4100 Gen10 Server, HPE Cloudline CL3100 Gen10 Server, HPE Cloudline CL5800 Gen10 Server BMC firmware.

How does this vulnerability impact HPE Cloudline servers?

This vulnerability allows local attackers to perform a path traversal attack on the Baseboard Management Controller (BMC) firmware of HPE Cloudline servers.

How can I fix this vulnerability?

To fix this vulnerability, users should update the BMC firmware of the affected HPE Cloudline servers to the latest version provided by HPE.