CVE-2021-26572: Buffer Overflow
First published: Mon Feb 08 2021(Updated: )
The Baseboard Management Controller (BMC) firmware in HPE Apollo 70 System prior to version 3.0.14.0 has a local buffer overflow in libifc.so webgetactivexcfg function.
Credit: security-alert@hpe.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Hpe Baseboard Management Controller | <3.0.14.0 | |
| HPE Apollo 70 System |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID?
The vulnerability ID is CVE-2021-26572.
What is the title of the vulnerability?
The title of the vulnerability is 'The Baseboard Management Controller (BMC) firmware in HPE Apollo 70 System prior to version 3.0.14.0...'
What is the description of the vulnerability?
The Baseboard Management Controller (BMC) firmware in HPE Apollo 70 System prior to version 3.0.14.0 has a local buffer overflow in libifc.so webgetactivexcfg function.
What software is affected by this vulnerability?
The HPE Baseboard Management Controller version up to 3.0.14.0 is affected by this vulnerability.
What is the severity of CVE-2021-26572?
The severity of CVE-2021-26572 is high with a CVSS score of 7.8.
How can I fix CVE-2021-26572?
To fix CVE-2021-26572, update the HPE Baseboard Management Controller firmware to version 3.0.14.0 or later.
Is HPE Apollo 70 System vulnerable to CVE-2021-26572?
No, HPE Apollo 70 System is not vulnerable to CVE-2021-26572.
What is the Common Weakness Enumeration (CWE) code for this vulnerability?
The Common Weakness Enumeration (CWE) codes for this vulnerability are 119 and 120.
Where can I find more information about CVE-2021-26572?
You can find more information about CVE-2021-26572 at the following reference link: [https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04080en_us](https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04080en_us)
- collector/nvd-index
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/references
- agent/weakness
- agent/last-modified-date
- agent/author
- agent/tags
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- vendor/hpe
- canonical/hpe baseboard management controller
- canonical/hpe apollo 70 system