CVE-2021-25136: HPE Cloudline CL3100 GEN10 Server Firmware

High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days.

The Baseboard Management Controller(BMC) in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5800 Gen10 Server BMC firmware has a local buffer overlfow in spx_restservice setsolvideoremotestorage_func function.

Affected products

• HPE Cloudline CL3100 GEN10 Server Firmware: version 1.08.0.0 only; version 1.10.0.0 only
• HPE Cloudline CL4100 GEN10 Server Firmware: version 1.08.0.0 only; version 1.10.0.0 only
• HPE Cloudline CL5200 GEN9 Server Firmware: version 1.07.0.0 only
• HPE Cloudline CL5800 GEN10 Server Firmware: version 1.08.0.0 only
• HPE Cloudline CL5800 GEN9 Server Firmware: version 1.09.0.0 only

Published 2021-01-29. Last modified 2026-06-17.