CVE-2021-25142: HPE Baseboard Management Controller

High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days.

The Baseboard Management Controller (BMC) firmware in HPE Apollo 70 System prior to version 3.0.14.0 has a local buffer overflow in libifc.so webstartflash function.

Affected products

• HPE Baseboard Management Controller: before 3.0.14.0 (fixed in 3.0.14.0)

Published 2021-02-08. Last modified 2026-06-17.