Read the docs

Hewlett Packard Enterprise (HPE)

Records928All Threatist records
Exploited (KEV)3In CISA KEV
CVSS critical166CVSS 9.0–10.0
CVSS high474CVSS 7.0–8.9

Exploited now

Hewlett Packard Enterprise (HPE) records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

14 records in Baseboard Management Controller · all components

TI-2021-08299 CVE-2021-26576 · GHSA-3j62-674q-3jr2

Command injection in HPE Apollo 70 System

Priority LOW 36

The Baseboard Management Controller (BMC) firmware in HPE Apollo 70 System prior to version 3.0.14.0 has a command injection vulnerability in libifc.so uploadsshkey function.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0085 Published 2021-02-08 No fix listed CWE-77
TI-2021-08293 CVE-2021-26570 · GHSA-4w3j-8fcj-qpw3

Buffer overflow in HPE Apollo 70 System

Priority LOW 35

The Baseboard Management Controller (BMC) firmware in HPE Apollo 70 System prior to version 3.0.14.0 has a local buffer overflow in libifc.so webifc_setadconfig function.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0051 Published 2021-02-08 No fix listed CWE-120
TI-2021-07450 CVE-2021-25172 · GHSA-4j5c-2m58-55rj

Command injection in HPE Apollo 70 System

Priority LOW 35

The Baseboard Management Controller (BMC) firmware in HPE Apollo 70 System prior to version 3.0.14.0 has a command injection vulnerability in libifc.so websetdefaultlangcfg function.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00737 Published 2021-02-08 No fix listed CWE-77
TI-2021-08300 CVE-2021-26577 · GHSA-fg9f-2rrg-653x

Buffer overflow in HPE Apollo 70 System

Priority LOW 34

The Baseboard Management Controller (BMC) firmware in HPE Apollo 70 System prior to version 3.0.14.0 has a local buffer overflow in libifc.so uploadsshkey function.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00381 Published 2021-02-08 No fix listed CWE-120
TI-2021-08298 CVE-2021-26575 · GHSA-jc6g-647j-w9g6

Path traversal in HPE Apollo 70 System

Priority LOW 34

The Baseboard Management Controller (BMC) firmware in HPE Apollo 70 System prior to version 3.0.14.0 has a path traversal vulnerability in libifc.so webdeletesolvideofile function.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00428 Published 2021-02-08 No fix listed CWE-22
TI-2021-08297 CVE-2021-26574 · GHSA-9h57-vmqg-5rrw

Path traversal in HPE Apollo 70 System

Priority LOW 34

The Baseboard Management Controller (BMC) firmware in HPE Apollo 70 System prior to version 3.0.14.0 has a path traversal vulnerability in libifc.so webdeletevideofile function.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00428 Published 2021-02-08 No fix listed CWE-22
TI-2021-08296 CVE-2021-26573 · GHSA-333m-gvxr-m7wp

Buffer overflow in HPE Apollo 70 System

Priority LOW 34

The Baseboard Management Controller (BMC) firmware in HPE Apollo 70 System prior to version 3.0.14.0 has a local buffer overflow in libifc.so webgeneratesslcfg function.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0033 Published 2021-02-08 No fix listed CWE-120
TI-2021-08295 CVE-2021-26572 · GHSA-7vqm-5368-jjhq

Buffer overflow in HPE Apollo 70 System

Priority LOW 34

The Baseboard Management Controller (BMC) firmware in HPE Apollo 70 System prior to version 3.0.14.0 has a local buffer overflow in libifc.so webgetactivexcfg function.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0033 Published 2021-02-08 No fix listed CWE-120
TI-2021-08294 CVE-2021-26571 · GHSA-f3fh-qqx3-hv26

Buffer overflow in HPE Apollo 70 System

Priority LOW 34

The Baseboard Management Controller (BMC) firmware in HPE Apollo 70 System prior to version 3.0.14.0 has a local buffer overflow in libifc.so webgetactivexcfg function.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0033 Published 2021-02-08 No fix listed CWE-120
TI-2021-07449 CVE-2021-25171 · GHSA-wcc2-hgw8-8prx

Buffer overflow in HPE Apollo 70 System

Priority LOW 34

The Baseboard Management Controller (BMC) firmware in HPE Apollo 70 System prior to version 3.0.14.0 has a local buffer overflow in libifc.so websetlicensecfg function.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0033 Published 2021-02-08 No fix listed CWE-120
TI-2021-07448 CVE-2021-25170 · GHSA-9c64-5jjg-w2cj

Buffer overflow in HPE Apollo 70 System

Priority LOW 34

The Baseboard Management Controller (BMC) firmware in HPE Apollo 70 System prior to version 3.0.14.0 has a local buffer overflow in libifc.so websetremoteimageinfo function.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0033 Published 2021-02-08 No fix listed CWE-120
TI-2021-07447 CVE-2021-25169 · GHSA-2fc5-f5mf-j7xp

Buffer overflow in HPE Apollo 70 System

Priority LOW 34

The Baseboard Management Controller (BMC) firmware in HPE Apollo 70 System prior to version 3.0.14.0 has a local buffer overflow in libifc.so websetservicecfg function.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0033 Published 2021-02-08 No fix listed CWE-120
TI-2021-07446 CVE-2021-25168 · GHSA-h9hf-qq5m-76px

Buffer overflow in HPE Apollo 70 System

Priority LOW 34

The Baseboard Management Controller (BMC) firmware in HPE Apollo 70 System prior to version 3.0.14.0 has a local buffer overflow in libifc.so webupdatecomponent function.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0033 Published 2021-02-08 No fix listed CWE-120
TI-2021-07420 CVE-2021-25142 · GHSA-xhw7-9wqv-ffm2

Buffer overflow in HPE Apollo 70 System

Priority LOW 34

The Baseboard Management Controller (BMC) firmware in HPE Apollo 70 System prior to version 3.0.14.0 has a local buffer overflow in libifc.so webstartflash function.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0034 Published 2021-02-08 No fix listed CWE-120
Open these records in search →