CVE-2021-25172: HPE Baseboard Management Controller

High severity, CVSS 7.8. EPSS: 0.7% chance of exploitation in the next 30 days.

The Baseboard Management Controller (BMC) firmware in HPE Apollo 70 System prior to version 3.0.14.0 has a command injection vulnerability in libifc.so websetdefaultlangcfg function.

Affected products

• HPE Baseboard Management Controller: before 3.0.14.0 (fixed in 3.0.14.0)

Published 2021-02-08. Last modified 2026-06-17.