CVE-2021-25139

A potential security vulnerability has been identified in the HPE Moonshot Provisioning Manager v1.20. The HPE Moonshot Provisioning Manager is an application that is installed in a VMWare or Microsoft Hyper-V environment that is used to setup and configure an HPE Moonshot 1500 chassis. This vulnerability could be remotely exploited by an unauthenticated user to cause a stack based buffer overflow using user supplied input to the `khuploadfile.cgi` CGI ELF. The stack based buffer overflow could lead to Remote Code Execution, Denial of Service, and/or compromise system integrity. **Note:** HPE recommends that customers discontinue the use of the HPE Moonshot Provisioning Manager. The HPE Moonshot Provisioning Manager application is discontinued, no longer supported, is not available to download from the HPE Support Center, and no patch is available.

• CWE-787

• https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04084en_usVendor Advisory
• https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04084en_usVendor Advisory

Published

Feb 9, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-25133The Baseboard Management Controller(BMC) in HPE Cloudline CL…7.8
• CVE-2021-25134The Baseboard Management Controller(BMC) in HPE Cloudline CL…7.8
• CVE-2021-25135The Baseboard Management Controller(BMC) in HPE Cloudline CL…7.8
• CVE-2021-25136The Baseboard Management Controller(BMC) in HPE Cloudline CL…7.8
• CVE-2021-25137The Baseboard Management Controller(BMC) in HPE Cloudline CL…7.8
• CVE-2021-25138The Baseboard Management Controller(BMC) in HPE Cloudline CL…7.8
• CVE-2021-25140A potential security vulnerability has been identified in th…9.8
• CVE-2021-25141A security vulnerability has been identified in in certain H…4.4
• CVE-2021-25142The Baseboard Management Controller (BMC) firmware in HPE Ap…7.8
• CVE-2021-25143A remote denial of service (dos) vulnerability was discovere…7.5
• CVE-2021-25144A remote buffer overflow vulnerability was discovered in som…8.8
• CVE-2021-25145A remote unauthorized disclosure of information vulnerabilit…6.5