CVE-2021-25170: Buffer Copy without Checking Size of Input

The Baseboard Management Controller BMC firmware in HPE Apollo 70 System prior to version 3.0.14.0 has a local buffer overflow in libifc.so websetremoteimageinfo function...

CVE-2021-25142: Buffer Copy without Checking Size of Input

The Baseboard Management Controller BMC firmware in HPE Apollo 70 System prior to version 3.0.14.0 has a local buffer overflow in libifc.so webstartflash function...

PT-2021-17050

Name of the Vulnerable Software and Affected Versions HPE Apollo 70 System versions prior to 3.0.14.0 Description The issue concerns a local buffer overflow in the libifc.so webgeneratesslcfg function. This is a problem with the Baseboard Management Controller BMC firmware. Recommendations For...

PT-2021-17047

Name of the Vulnerable Software and Affected Versions HPE Apollo 70 System versions prior to 3.0.14.0 Description The issue concerns a local buffer overflow in the libifc.so webifc setadconfig function. This is a problem with the Baseboard Management Controller BMC firmware. Recommendations For...

PT-2021-17051

Name of the Vulnerable Software and Affected Versions HPE Apollo 70 System versions prior to 3.0.14.0 Description The issue concerns a path traversal vulnerability in the webdeletevideofile function of libifc.so. This vulnerability is present in the Baseboard Management Controller BMC firmware...

PT-2021-16443

Name of the Vulnerable Software and Affected Versions: HPE Apollo 70 System versions prior to 3.0.14.0 Description: The issue is related to a local buffer overflow in the libifc.so websetlicensecfg function within the Baseboard Management Controller BMC firmware. This overflow can potentially be...

PT-2021-16440

Name of the Vulnerable Software and Affected Versions: HPE Apollo 70 System versions prior to 3.0.14.0 Description: The issue is related to a local buffer overflow in the libifc.so webupdatecomponent function within the Baseboard Management Controller BMC firmware. This overflow can potentially b...

PT-2021-16444

Name of the Vulnerable Software and Affected Versions: HPE Apollo 70 System versions prior to 3.0.14.0 Description: The issue concerns a command injection vulnerability in the libifc.so websetdefaultlangcfg function. This vulnerability is present in the Baseboard Management Controller BMC firmwar...

PT-2021-16442

Name of the Vulnerable Software and Affected Versions: HPE Apollo 70 System versions prior to 3.0.14.0 Description: The issue is related to a local buffer overflow in the libifc.so websetremoteimageinfo function. This function is part of the Baseboard Management Controller BMC firmware. No...

PT-2021-16441

Name of the Vulnerable Software and Affected Versions: HPE Apollo 70 System versions prior to 3.0.14.0 Description: The issue is related to a local buffer overflow in the libifc.so websetservicecfg function. This overflow occurs in the Baseboard Management Controller BMC firmware of the affected...

PT-2021-16418

Name of the Vulnerable Software and Affected Versions: HPE Apollo 70 System versions prior to 3.0.14.0 Description: The issue concerns a local buffer overflow in the webstartflash function of libifc.so within the Baseboard Management Controller BMC firmware. Recommendations: For versions prior to...

PT-2021-17049

Name of the Vulnerable Software and Affected Versions HPE Apollo 70 System versions prior to 3.0.14.0 Description The issue concerns a local buffer overflow in the webgetactivexcfg function of the libifc.so library. This is a problem within the Baseboard Management Controller BMC firmware...

PT-2021-17048

Name of the Vulnerable Software and Affected Versions HPE Apollo 70 System versions prior to 3.0.14.0 Description The issue is a local buffer overflow in the libifc.so webgetactivexcfg function. This function is part of the Baseboard Management Controller BMC firmware. Recommendations For version...

PT-2021-17053

Name of the Vulnerable Software and Affected Versions HPE Apollo 70 System versions prior to 3.0.14.0 Description The issue is related to a command injection vulnerability in the libifc.so uploadsshkey function. This vulnerability affects the Baseboard Management Controller BMC firmware...

PT-2021-17054

Name of the Vulnerable Software and Affected Versions HPE Apollo 70 System versions prior to 3.0.14.0 Description The issue concerns a local buffer overflow in the uploadsshkey function of libifc.so within the Baseboard Management Controller BMC firmware. This is a type of security flaw where mor...

PT-2021-17052

Name of the Vulnerable Software and Affected Versions HPE Apollo 70 System versions prior to 3.0.14.0 Description The issue concerns a path traversal vulnerability in the libifc.so webdeletesolvideofile function. This vulnerability is present in the Baseboard Management Controller BMC firmware...

HPE Apollo security vulnerabilities

The HPE Apollo 70 system is an Arm-based platform that delivers the density and scalability required for large HPC cluster deployments. A local buffer overflow vulnerability exists in the libifc.so uploadsshkey function in the Baseboard Management Controller BMC firmware in HPE Apollo 70 versions...

CVE-2021-25171: Buffer Copy without Checking Size of Input

The Baseboard Management Controller BMC firmware in HPE Apollo 70 System prior to version 3.0.14.0 has a local buffer overflow in libifc.so websetlicensecfg function...

CVE-2021-25168: Buffer Copy without Checking Size of Input

The Baseboard Management Controller BMC firmware in HPE Apollo 70 System prior to version 3.0.14.0 has a local buffer overflow in libifc.so webupdatecomponent function...

HPESBHF04080 rev.1 - HPE Apollo 70 System's Baseboard Management Controller (BMC) firmware have multiple local vulnerabilities

Potential Security Impact: Local: Denial of Service DoS, Directory Traversal, Buffer Overflow SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Apollo 70 System -Prior to Version 3.0.14.0 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2021-25142 |...