CVE-2021-25127

Severity: high (CVSS 7.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2021-01-29 · updated 2026-06-17
Weakness: CWE-120

Description

The Baseboard Management Controller(BMC) in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5800 Gen10 Server BMC firmware has a local buffer overlfow in spx_restservice generatesslcertificate_func function.

Affected products

HPE Cloudline Cl3100 Gen10 Server Firmware: 1.08.0.0, 1.10.0.0
HPE Cloudline Cl4100 Gen10 Server Firmware: 1.08.0.0, 1.10.0.0
HPE Cloudline Cl5200 Gen9 Server Firmware: 1.07.0.0
HPE Cloudline Cl5800 Gen10 Server Firmware: 1.08.0.0
HPE Cloudline Cl5800 Gen9 Server Firmware: 1.09.0.0

References

https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04073en_us
https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04073en_us

Get alerted when CVE-2021-25127 or the next vulnerability affects your stack