Lucene search

HpeCVE-2021-25169

HistoryFeb 08, 2021 - 7:15 p.m.

CVE-2021-25169

2021-02-0819:15:14

CWE-120

hpe

web.nvd.nist.gov

cve-2021-25169

baseboard management controller

bmc firmware

hpe apollo 70 system

buffer overflow

libifc.so

websetservicecfg

nvd

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.7

Confidence

High

EPSS

Percentile

5.1%

JSON

The Baseboard Management Controller (BMC) firmware in HPE Apollo 70 System prior to version 3.0.14.0 has a local buffer overflow in libifc.so websetservicecfg function.

Affected configurations

Nvd

Node

hpebaseboard_management_controllerRange<3.0.14.0

AND

hpeapollo_70_systemMatch-

VendorProductVersionCPE
hpebaseboard_management_controller*cpe:2.3:o:hpe:baseboard_management_controller:*:*:*:*:*:*:*:*
hpeapollo_70_system-cpe:2.3:h:hpe:apollo_70_system:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
hpe	baseboard_management_controller	*	cpe:2.3:o:hpe:baseboard_management_controller::::::::
hpe	apollo_70_system	-	cpe:2.3:h:hpe:apollo_70_system:-:::::::*

CNA Affected

[
  {
    "product": "HPE Apollo 70 System",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Prior to Version 3.0.14.0"
      }
    ]
  }
]

References

support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04080en_us

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.7

Confidence

High

EPSS

Percentile

5.1%

JSON

Related for CVE-2021-25169