EUVD-2021-12053

Malware in sbrugna...

CVE-2021-26573

The Baseboard Management Controller BMC firmware in HPE Apollo 70 System prior to version 3.0.14.0 has a local buffer overflow in libifc.so webgeneratesslcfg function...

CVE-2021-25172

The Baseboard Management Controller BMC firmware in HPE Apollo 70 System prior to version 3.0.14.0 has a command injection vulnerability in libifc.so websetdefaultlangcfg function...

CVE-2021-26576

The Baseboard Management Controller BMC firmware in HPE Apollo 70 System prior to version 3.0.14.0 has a command injection vulnerability in libifc.so uploadsshkey function...

Command injection

The Baseboard Management Controller BMC firmware in HPE Apollo 70 System prior to version 3.0.14.0 has a command injection vulnerability in libifc.so uploadsshkey function...

CVE-2021-26575

The Baseboard Management Controller BMC firmware in HPE Apollo 70 System prior to version 3.0.14.0 has a path traversal vulnerability in libifc.so webdeletesolvideofile function...

CVE-2021-26574

The Baseboard Management Controller BMC firmware in HPE Apollo 70 System prior to version 3.0.14.0 has a path traversal vulnerability in libifc.so webdeletevideofile function...

CVE-2021-26577

The Baseboard Management Controller BMC firmware in HPE Apollo 70 System prior to version 3.0.14.0 has a local buffer overflow in libifc.so uploadsshkey function...

Buffer overflow

The Baseboard Management Controller BMC firmware in HPE Apollo 70 System prior to version 3.0.14.0 has a local buffer overflow in libifc.so uploadsshkey function...

Command injection

The Baseboard Management Controller BMC firmware in HPE Apollo 70 System prior to version 3.0.14.0 has a command injection vulnerability in libifc.so websetdefaultlangcfg function...

Path traversal

The Baseboard Management Controller BMC firmware in HPE Apollo 70 System prior to version 3.0.14.0 has a path traversal vulnerability in libifc.so webdeletevideofile function...

CVE-2021-26576

CVE-2021-26576 affects the Baseboard Management Controller (BMC) firmware in HPE Apollo 70 System. The vulnerability is a command injection in the libifc.so uploadsshkey function, originating from the BMC firmware prior to version 3.0.14.0. The issue is tied to the 3.0.14.0 mitigation, with all r...

CVE-2021-26576

The Baseboard Management Controller BMC firmware in HPE Apollo 70 System prior to version 3.0.14.0 has a command injection vulnerability in libifc.so uploadsshkey function...

CVE-2021-26574

CVE-2021-26574 affects HPE Apollo 70 System BMC firmware prior to version 3.0.14.0, with a path traversal vulnerability in the libifc.so webdeletevideofile function. The issue is injected through the BMC firmware’s web interface, enabling unauthorized access to restricted files due to improper in...

CVE-2021-26574

The Baseboard Management Controller BMC firmware in HPE Apollo 70 System prior to version 3.0.14.0 has a path traversal vulnerability in libifc.so webdeletevideofile function...

CVE-2021-26577

The CVE-2021-26577 issue affects the BMC firmware in HPE Apollo 70 System prior to 3.0.14.0. A local buffer overflow in the libifc.so uploadsshkey function is the root cause. Impact is high due to potential control over the BMC from a local fault, with all confidentiality, integrity, and availabi...

CVE-2021-26577

The Baseboard Management Controller BMC firmware in HPE Apollo 70 System prior to version 3.0.14.0 has a local buffer overflow in libifc.so uploadsshkey function...

CVE-2021-26571

The Baseboard Management Controller BMC firmware in HPE Apollo 70 System prior to version 3.0.14.0 has a local buffer overflow in libifc.so webgetactivexcfg function...

CVE-2021-25171

The Baseboard Management Controller BMC firmware in HPE Apollo 70 System prior to version 3.0.14.0 has a local buffer overflow in libifc.so websetlicensecfg function...

CVE-2021-26570

The Baseboard Management Controller BMC firmware in HPE Apollo 70 System prior to version 3.0.14.0 has a local buffer overflow in libifc.so webifcsetadconfig function...