CVE-2021-26570

CVE-2021-26570 concerns the Baseboard Management Controller (BMC) firmware in the HPE Apollo 70 System prior to version 3.0.14.0, where a local buffer overflow exists in the libifc.so function webifc_setadconfig. The root cause is a vulnerable code path in the BMC firmware that can be triggered l...

CVE-2021-25171

The vulnerability CVE-2021-25171 affects the HPE Apollo 70 System BMC firmware prior to version 3.0.14.0, due to a local buffer overflow in the libifc.so websetlicensecfg function. This is a local issue that could impact confidentiality, integrity, and availability as indicated by CVSS data; expl...

CVE-2021-25142

The Baseboard Management Controller BMC firmware in HPE Apollo 70 System prior to version 3.0.14.0 has a local buffer overflow in libifc.so webstartflash function...

CVE-2021-25169

The CVE-2021-25169 entry describes a local buffer overflow in the BMC firmware of HPE Apollo 70 System, in the libifc.so websetservicecfg function, affecting versions prior to 3.0.14.0. Sources consistently identify this as a local overflow vulnerability; exploitation details are not provided in ...

CVE-2021-25170

The CVE-2021-25170 entry concerns the Baseboard Management Controller (BMC) firmware in HPE Apollo 70 System prior to version 3.0.14.0, where a local buffer overflow exists in the libifc.so websetremoteimageinfo function. Affected component: BMC firmware on HPE Apollo 70; root cause: buffer overf...

CVE-2021-25168

CVE-2021-25168 affects the HPE Apollo 70 System BMC firmware: a local buffer overflow in the libifc.so webupdatecomponent function in versions prior to 3.0.14.0. This is a local vulnerability with high impact per CVSS data. Public details in connected documents consistently describe the affected ...

PT-2021-17048

Name of the Vulnerable Software and Affected Versions HPE Apollo 70 System versions prior to 3.0.14.0 Description The issue is a local buffer overflow in the libifc.so webgetactivexcfg function. This function is part of the Baseboard Management Controller BMC firmware. Recommendations For version...

PT-2021-16442

Name of the Vulnerable Software and Affected Versions: HPE Apollo 70 System versions prior to 3.0.14.0 Description: The issue is related to a local buffer overflow in the libifc.so websetremoteimageinfo function. This function is part of the Baseboard Management Controller BMC firmware. No...

PT-2021-16440

Name of the Vulnerable Software and Affected Versions: HPE Apollo 70 System versions prior to 3.0.14.0 Description: The issue is related to a local buffer overflow in the libifc.so webupdatecomponent function within the Baseboard Management Controller BMC firmware. This overflow can potentially b...

PT-2021-17052

Name of the Vulnerable Software and Affected Versions HPE Apollo 70 System versions prior to 3.0.14.0 Description The issue concerns a path traversal vulnerability in the libifc.so webdeletesolvideofile function. This vulnerability is present in the Baseboard Management Controller BMC firmware...

PT-2021-17051

Name of the Vulnerable Software and Affected Versions HPE Apollo 70 System versions prior to 3.0.14.0 Description The issue concerns a path traversal vulnerability in the webdeletevideofile function of libifc.so. This vulnerability is present in the Baseboard Management Controller BMC firmware...

HPE Apollo security vulnerabilities

The HPE Apollo 70 system is an Arm-based platform that provides the density and scalability required for large HPC cluster deployments. A local buffer overflow vulnerability exists in the libifc.so webstartflash function in the Baseboard Management Controller BMC firmware in HPE Apollo 70 version...

HPE Apollo 70 buffer error vulnerability

The HPE Apollo 70 system is an Arm-based platform that provides the density and scalability required for large HPC cluster deployments. A local buffer overflow vulnerability exists in the libifc.so websetlicensecfg function in the Baseboard Management Controller BMC firmware in HPE Apollo 70...

HPE Apollo 70 command injection vulnerability

The HPE Apollo 70 system is an Arm-based platform that provides the density and scalability required for large HPC cluster deployments. A command injection vulnerability exists in the libifc.so websetdefaultlangcfg function in the Baseboard Management Controller BMC firmware in HPE Apollo 70...

HPE Apollo security vulnerabilities

The HPE Apollo 70 system is an Arm-based platform that provides the density and scalability required for large HPC cluster deployments. A local buffer overflow vulnerability exists in the libifc.so webupdatecomponent function in the Baseboard Management Controller BMC firmware in HPE Apollo 70...

HPE Apollo 70 Resource Management Vulnerability

The HPE Apollo 70 system is an Arm-based platform that delivers the density and scalability required for large HPC cluster deployments. A local buffer overflow vulnerability exists in the libifc.so webgetactivexcfg function in the Baseboard Management Controller BMC firmware in HPE Apollo 70...

HPESBHF04080 rev.1 - HPE Apollo 70 System's Baseboard Management Controller (BMC) firmware have multiple local vulnerabilities

Potential Security Impact: Local: Denial of Service DoS, Directory Traversal, Buffer Overflow SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Apollo 70 System -Prior to Version 3.0.14.0 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2021-25142 |...

CVE-2021-25138

The Baseboard Management ControllerBMC in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5800 Gen10 Server BMC firmware has a local buffer overlfow in spxrestservice uploadsshkey function...

CVE-2021-25135

The Baseboard Management ControllerBMC in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5800 Gen10 Server BMC firmware has a local buffer overlfow in spxrestservice setsmtpfunc function...

CVE-2021-25134

The Baseboard Management ControllerBMC in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5800 Gen10 Server BMC firmware has a local buffer overlfow in spxrestservice setremoteimageinfofunc...