high7.8
CVE-2021-25129
The Baseboard Management Controller(BMC) in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudlin…
Impact
The Baseboard Management Controller(BMC) in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5800 Gen10 Server BMC firmware has a local spx_restservice getvideodata_func function path traversal vulnerability.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hpe | Cloudline Cl3100 Gen10 Server Firmware | Versions 1.08.0.0, 1.10.0.0 |
| Hpe | Cloudline Cl4100 Gen10 Server Firmware | Versions 1.08.0.0, 1.10.0.0 |
| Hpe | Cloudline Cl5200 Gen9 Server Firmware | Version 1.07.0.0 |
| Hpe | Cloudline Cl5800 Gen10 Server Firmware | Version 1.08.0.0 |
| Hpe | Cloudline Cl5800 Gen9 Server Firmware | Version 1.09.0.0 |