Lucene search

[email protected]CVE-2021-28198

HistoryApr 06, 2021 - 5:15 a.m.

CVE-2021-28198

2021-04-0605:15:00

CWE-120

[email protected]

web.nvd.nist.gov

asus

bmc

firmware

buffer overflow

vulnerability

remote attack

nvd

cve-2021-28198

4.9 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

5.3 Medium

AI Score

Confidence

High

4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:N/A:P

0.003 Low

EPSS

Percentile

71.7%

JSON

The Firmware protocol configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.

CPENameOperatorVersion
asus:asmb9-ikvm_firmwareasus asmb9-ikvm firmwareeq1.11.12
asus:rs720a-e9-rs24-e_firmwareasus rs720a-e9-rs24-e firmwareeq1.10.3
asus:rs700a-e9-rs4_firmwareasus rs700a-e9-rs4 firmwareeq1.10.0
asus:rs700-e9-rs4_firmwareasus rs700-e9-rs4 firmwareeq1.09
asus:esc4000_g4x_firmwareasus esc4000 g4x firmwareeq1.11.6
asus:rs700-e9-rs12_firmwareasus rs700-e9-rs12 firmwareeq1.11.5
asus:rs100-e10-pi2_firmwareasus rs100-e10-pi2 firmwareeq1.13.6
asus:rs300-e10-ps4_firmwareasus rs300-e10-ps4 firmwareeq1.13.6
asus:rs300-e10-rs4_firmwareasus rs300-e10-rs4 firmwareeq1.13.6
asus:rs500a-e9-ps4_firmwareasus rs500a-e9-ps4 firmwareeq1.14.1

CPE	Name	Operator	Version
asus:asmb9-ikvm_firmware	asus asmb9-ikvm firmware	eq	1.11.12
asus:rs720a-e9-rs24-e_firmware	asus rs720a-e9-rs24-e firmware	eq	1.10.3
asus:rs700a-e9-rs4_firmware	asus rs700a-e9-rs4 firmware	eq	1.10.0
asus:rs700-e9-rs4_firmware	asus rs700-e9-rs4 firmware	eq	1.09
asus:esc4000_g4x_firmware	asus esc4000 g4x firmware	eq	1.11.6
asus:rs700-e9-rs12_firmware	asus rs700-e9-rs12 firmware	eq	1.11.5
asus:rs100-e10-pi2_firmware	asus rs100-e10-pi2 firmware	eq	1.13.6
asus:rs300-e10-ps4_firmware	asus rs300-e10-ps4 firmware	eq	1.13.6
asus:rs300-e10-rs4_firmware	asus rs300-e10-rs4 firmware	eq	1.13.6
asus:rs500a-e9-ps4_firmware	asus rs500a-e9-ps4 firmware	eq	1.14.1

Rows per page:

1-10 of 441

References

www.asus.com/content/ASUS-Product-Security-Advisory/

www.asus.com/tw/support/callus/

www.twcert.org.tw/tw/cp-132-4568-627f7-1.html

4.9 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

5.3 Medium

AI Score

Confidence

High

4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:N/A:P

0.003 Low

EPSS

Percentile

71.7%

JSON

Related for CVE-2021-28198

cvelist1 prion1