CVE-2021-25130: Buffer Overflow
The Baseboard Management Controller(BMC) in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5800 Gen10 Server BMC firmware has a local buffer overlfow in spxrestservice setactdirfunc function.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2021-25130?
CVE-2021-25130 is a vulnerability in the Baseboard Management Controller (BMC) firmware of certain HPE Cloudline servers, which allows for a local buffer overflow in the spx_restservice setactdir_func function.
Which servers are affected by CVE-2021-25130?
CVE-2021-25130 affects HPE Cloudline CL5800 Gen9 Server, HPE Cloudline CL5200 Gen9 Server, HPE Cloudline CL4100 Gen10 Server, HPE Cloudline CL3100 Gen10 Server, and HPE Cloudline CL5800 Gen10 Server.
What is the severity of CVE-2021-25130?
The severity of CVE-2021-25130 is high, with a severity value of 7.8.
How can I fix CVE-2021-25130?
To fix CVE-2021-25130, it is recommended to update the BMC firmware of the affected HPE Cloudline servers to a non-vulnerable version.
Where can I find more information about CVE-2021-25130?
You can find more information about CVE-2021-25130 on the HPE support website.