CVE-2021-25132: Buffer Overflow
First published: Fri Jan 29 2021(Updated: )
The Baseboard Management Controller(BMC) in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5800 Gen10 Server BMC firmware has a local buffer overlfow in spx_restservice setmediaconfig_func function.
Credit: security-alert@hpe.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Hpe Cloudline Cl3100 Gen10 Server Firmware | =1.08.0.0 | |
| Hpe Cloudline Cl3100 Gen10 Server Firmware | =1.10.0.0 | |
| HPE Cloudline CL3100 Gen10 Server | ||
| Hpe Cloudline Cl4100 Gen10 Server Firmware | =1.08.0.0 | |
| Hpe Cloudline Cl4100 Gen10 Server Firmware | =1.10.0.0 | |
| HPE Cloudline CL4100 Gen10 Server | ||
| Hpe Cloudline Cl5200 Gen9 Server Firmware | =1.07.0.0 | |
| HPE Cloudline CL5200 Gen9 Server | ||
| Hpe Cloudline Cl5800 Gen10 Server Firmware | =1.08.0.0 | |
| HPE Cloudline CL5800 Gen10 Server | ||
| Hpe Cloudline Cl5800 Gen9 Server Firmware | =1.09.0.0 | |
| HPE Cloudline CL5800 Gen9 Server |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2021-25132?
CVE-2021-25132 is a vulnerability in the Baseboard Management Controller (BMC) firmware of various HPE Cloudline servers, which allows for a local buffer overflow in the spx_restservice setmediaconfig_func function.
Which HPE Cloudline servers are affected by CVE-2021-25132?
CVE-2021-25132 affects the HPE Cloudline CL5800 Gen9 Server, HPE Cloudline CL5200 Gen9 Server, HPE Cloudline CL4100 Gen10 Server, HPE Cloudline CL3100 Gen10 Server, and HPE Cloudline CL5800 Gen10 Server.
What is the severity of CVE-2021-25132?
CVE-2021-25132 has a severity rating of 7.8, which is classified as high.
How can I fix CVE-2021-25132?
To fix CVE-2021-25132, it is recommended to update the BMC firmware of the affected HPE Cloudline servers to a version that addresses the vulnerability.
Where can I find more information about CVE-2021-25132?
More information about CVE-2021-25132 can be found in the HPE security bulletin: https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04073en_us
- collector/nvd-index
- agent/references
- agent/severity
- agent/author
- agent/type
- agent/weakness
- agent/description
- agent/event
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/hpe
- canonical/hpe cloudline cl3100 gen10 server firmware
- version/hpe cloudline cl3100 gen10 server firmware/1.08.0.0
- version/hpe cloudline cl3100 gen10 server firmware/1.10.0.0
- canonical/hpe cloudline cl3100 gen10 server
- canonical/hpe cloudline cl4100 gen10 server firmware
- version/hpe cloudline cl4100 gen10 server firmware/1.08.0.0
- version/hpe cloudline cl4100 gen10 server firmware/1.10.0.0
- canonical/hpe cloudline cl4100 gen10 server
- canonical/hpe cloudline cl5200 gen9 server firmware
- version/hpe cloudline cl5200 gen9 server firmware/1.07.0.0
- canonical/hpe cloudline cl5200 gen9 server
- canonical/hpe cloudline cl5800 gen10 server firmware
- version/hpe cloudline cl5800 gen10 server firmware/1.08.0.0
- canonical/hpe cloudline cl5800 gen10 server
- canonical/hpe cloudline cl5800 gen9 server firmware
- version/hpe cloudline cl5800 gen9 server firmware/1.09.0.0
- canonical/hpe cloudline cl5800 gen9 server