CVE-2021-25127: Buffer Overflow

Published Jan 29, 2021

Updated

The Baseboard Management Controller(BMC) in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5800 Gen10 Server BMC firmware has a local buffer overlfow in spxrestservice generatesslcertificatefunc function.

Affected Software

12 affected components

HPE Cloudline Cl3100 Gen10 Server Firmware=1.08.0.0

HPE Cloudline Cl3100 Gen10 Server Firmware=1.10.0.0

HPE Cloudline CL3100 Gen10 Server

HPE Cloudline Cl4100 Gen10 Server Firmware=1.08.0.0

HPE Cloudline Cl4100 Gen10 Server Firmware=1.10.0.0

HPE Cloudline CL4100 Gen10 Server

HPE Cloudline Cl5200 Gen9 Server Firmware=1.07.0.0

HPE Cloudline CL5200 Gen9 Server

HPE Cloudline Cl5800 Gen10 Server Firmware=1.08.0.0

HPE Cloudline CL5800 Gen10 Server

HPE Cloudline Cl5800 Gen9 Server Firmware=1.09.0.0

HPE Cloudline CL5800 Gen9 Server

Event History

Jan 29, 2021

CVE Published

via MITRE·06:33 PM

Data Sourced

via MITRE·06:33 PM

DescriptionWeakness

Frequently Asked Questions

What is CVE-2021-25127?

CVE-2021-25127 is a vulnerability in the Baseboard Management Controller (BMC) firmware of HPE Cloudline servers.

How does CVE-2021-25127 affect HPE Cloudline CL5800 Gen9 Server?

CVE-2021-25127 affects HPE Cloudline CL5800 Gen9 Server through its BMC firmware.

How severe is CVE-2021-25127?

CVE-2021-25127 has a severity rating of 7.8 (High).

How do I fix CVE-2021-25127?

To fix CVE-2021-25127, update the BMC firmware of the affected HPE Cloudline servers to the latest version.

Where can I find more information about CVE-2021-25127?

More information about CVE-2021-25127 can be found at the following link: [CVE-2021-25127](https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04073en_us).