What’s Vulnerable › Vulnerabilities
CVE-2021-25136
- Severity: high (CVSS 7.8 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.3% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2021-01-29 · updated 2026-06-17
- Weakness: CWE-120
Description
The Baseboard Management Controller(BMC) in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5800 Gen10 Server BMC firmware has a local buffer overlfow in spx_restservice setsolvideoremotestorage_func function.
Affected products
- HPE Cloudline Cl3100 Gen10 Server Firmware: 1.08.0.0, 1.10.0.0
- HPE Cloudline Cl4100 Gen10 Server Firmware: 1.08.0.0, 1.10.0.0
- HPE Cloudline Cl5200 Gen9 Server Firmware: 1.07.0.0
- HPE Cloudline Cl5800 Gen10 Server Firmware: 1.08.0.0
- HPE Cloudline Cl5800 Gen9 Server Firmware: 1.09.0.0
References
- https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04073en_us
- https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04073en_us
Get alerted when CVE-2021-25136 or the next vulnerability affects your stack