Buffer Overflow Vulnerability in HPE Apollo 70 Baseboard Management Controller Firmware

CVE-2021-25171

What is CVE-2021-25171?

The firmware of the Baseboard Management Controller (BMC) in HPE Apollo 70 Systems contains a vulnerability that allows for a local buffer overflow through the libifc.so websetlicensecfg function. This flaw can be exploited by an authenticated user to manipulate memory, potentially leading to unauthorized actions or system crashes. It is crucial for system administrators to update to version 3.0.14.0 or later to mitigate this security risk. More information can be found on HPE's support documentation.

References