CVE-2021-25172

The CVE-2021-25172 entry affects HPE Apollo 70 System BMC firmware, where the libifc.so websetdefaultlangcfg function is vulnerable to command injection in versions prior to 3.0.14.0. Root cause: vulnerable websetdefaultlangcfg implementation in libifc.so. Impact: potential local command executio...

CVE-2021-26573

The CVE-2021-26573 issue affects HP/HPE Apollo 70 System BMC firmware prior to version 3.0.14.0. A local buffer overflow in the libifc.so webgeneratesslcfg function is the root cause. The vulnerability is actionable only from a local attacker and is reported with high impact to confidentiality, i...

CVE-2021-25168

CVE-2021-25168 affects the HPE Apollo 70 System BMC firmware: a local buffer overflow in the libifc.so webupdatecomponent function in versions prior to 3.0.14.0. This is a local vulnerability with high impact per CVSS data. Public details in connected documents consistently describe the affected ...

CVE-2021-26576

CVE-2021-26576 affects the Baseboard Management Controller (BMC) firmware in HPE Apollo 70 System. The vulnerability is a command injection in the libifc.so uploadsshkey function, originating from the BMC firmware prior to version 3.0.14.0. The issue is tied to the 3.0.14.0 mitigation, with all r...

CVE-2021-25169

The CVE-2021-25169 entry describes a local buffer overflow in the BMC firmware of HPE Apollo 70 System, in the libifc.so websetservicecfg function, affecting versions prior to 3.0.14.0. Sources consistently identify this as a local overflow vulnerability; exploitation details are not provided in ...

CVE-2021-26572

The vulnerability CVE-2021-26572 affects the HPE Apollo 70 System BMC firmware before version 3.0.14.0, caused by a local buffer overflow in the libifc.so webgetactivexcfg function. Affected component: BMC firmware; vulnerable code path: webgetactivexcfg in libifc.so. Upgrading to 3.0.14.0 or lat...

CVE-2021-25170

The CVE-2021-25170 entry concerns the Baseboard Management Controller (BMC) firmware in HPE Apollo 70 System prior to version 3.0.14.0, where a local buffer overflow exists in the libifc.so websetremoteimageinfo function. Affected component: BMC firmware on HPE Apollo 70; root cause: buffer overf...

CVE-2021-26570

CVE-2021-26570 concerns the Baseboard Management Controller (BMC) firmware in the HPE Apollo 70 System prior to version 3.0.14.0, where a local buffer overflow exists in the libifc.so function webifc_setadconfig. The root cause is a vulnerable code path in the BMC firmware that can be triggered l...

CVE-2021-25142

The CVE is for the HPE Apollo 70 System BMC firmware: a local buffer overflow in libifc.so webstartflash function, affecting versions prior to 3.0.14.0. Impact is a local breach of confidentiality, integrity, and availability per CVSS, with LOCAL attack vector and no user interaction required (pe...

CVE-2021-26574

CVE-2021-26574 affects HPE Apollo 70 System BMC firmware prior to version 3.0.14.0, with a path traversal vulnerability in the libifc.so webdeletevideofile function. The issue is injected through the BMC firmware’s web interface, enabling unauthorized access to restricted files due to improper in...

CVE-2021-26577

The CVE-2021-26577 issue affects the BMC firmware in HPE Apollo 70 System prior to 3.0.14.0. A local buffer overflow in the libifc.so uploadsshkey function is the root cause. Impact is high due to potential control over the BMC from a local fault, with all confidentiality, integrity, and availabi...

CVE-2021-26575

CVE-2021-26575 concerns the Baseboard Management Controller (BMC) firmware in HPE Apollo 70 System, affected versions prior to 3.0.14.0. The vulnerability is a path traversal in the libifc.so function webdeletesolvideofile. Connected documents confirm this BMC component and version range; no expl...

CVE-2021-25171

The vulnerability CVE-2021-25171 affects the HPE Apollo 70 System BMC firmware prior to version 3.0.14.0, due to a local buffer overflow in the libifc.so websetlicensecfg function. This is a local issue that could impact confidentiality, integrity, and availability as indicated by CVSS data; expl...

CVE-2021-26571

CVE-2021-26571 affects HPE Apollo 70 System BMC firmware prior to 3.0.14.0, with a local buffer overflow in libifc.so webgetactivexcfg. Exploitation details are not provided in the documents, but CVSS metrics indicate HIGH impact (local access, complete confidentiality/integrity/availability). Re...