Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2021-26573: The Baseboard Management Controller (BMC) firmware in HPE Apollo 70 System prior to version 3.0.14.0 has a local buffer overflow in libifc.so webgeneratesslcfg function.

CVE-2021-26573 · published 5 years ago

Summary

The Baseboard Management Controller (BMC) firmware in HPE Apollo 70 System prior to version 3.0.14.0 has a local buffer overflow in libifc.so webgeneratesslcfg function.

What to do

Update hpe baseboard_management_controller to version 3.0.14.0 or later.

Affected software

Vendor	Product	Affected versions
hpe	baseboard_management_controller	< 3.0.14.0 `cpe:2.3:o:hpe:baseboard_management_controller::::::::`

Original advisory text

The Baseboard Management Controller (BMC) firmware in HPE Apollo 70 System prior to version 3.0.14.0 has a local buffer overflow in libifc.so webgeneratesslcfg function.

References

https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpe... Patch Vendor Advisory

Fix within

Internet-facing 14 days

Internal At next upgrade

Not known to be exploited
Needs hands-on effort to exploit (estimated)
Gives an attacker full control (estimated)

Severity

7.8 High

Exploitation

<1% chance of attack within 30 days

Type

CWE-120Classic Buffer Overflow

Timeline

Published8 Feb 2021

Updated3 Nov 2026

First seen29 Sep 2026

Sources

CVE-2021-26573 · NVD

Track software like this

Free during beta