Firmware vulnerabilities in millions of computers could give hackers superuser status

I keep my HPE iLO’s up to date. I wonder if those CVE’s impact unpatched BMC’s, or if they are running firmware that can not be patched?