ASUS BMC Firmware 安全特征问题漏洞

ASUS BMC Firmware is a firmware from Asus China. A buffer overflow vulnerability exists in the ASUS BMC firmware Web management page, which originates from the Active Directory configuration function not validating the length of a string entered by a user, and can be exploited by a remote attacke...

PT-2021-17792

Name of the Vulnerable Software and Affected Versions: ASUS BMC firmware affected versions not specified Description: The DNS configuration function in the firmware's Web management page does not verify the string length entered by users, resulting in a buffer overflow issue. This allows remote...

PT-2021-17806

Name of the Vulnerable Software and Affected Versions: ASUS BMC affected versions not specified Description: The issue arises from a function in the ASUS BMC's firmware Web management page, specifically the Generate new certificate function, which fails to verify the string length entered by user...

PT-2021-17819

Name of the Vulnerable Software and Affected Versions: ASUS BMC affected versions not specified Description: The issue concerns the Web Set Media Image function in ASUS BMC's firmware Web management page, which fails to filter a specific parameter. This allows remote attackers, who have obtained...

PT-2021-17798

Name of the Vulnerable Software and Affected Versions: ASUS BMC firmware affected versions not specified Description: The issue arises from the Web Service configuration function in the firmware's Web management page, which fails to verify the string length entered by users. This oversight leads ...

ASUS BMC Firmware 安全特征问题漏洞

ASUS BMC Firmware is a firmware from Asus China. A buffer overflow vulnerability exists in the ASUS BMC firmware Web management page, which originates from a DNS configuration function that does not validate the length of a string entered by the user, and can be exploited by a remote attacker to...

PT-2021-17803

Name of the Vulnerable Software and Affected Versions: ASUS BMC firmware affected versions not specified Description: The issue arises from a function in the ASUS BMC's firmware Web management page, specifically the "Generate new SSL certificate" feature, which fails to verify the string length...

CVE-2021-28185: Buffer Copy without Checking Size of Input

The specific function in ASUS BMC’s firmware Web management page ActiveX configuration-1 acquisition does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate t...

ASUS BMC Firmware 路径遍历漏洞

ASUS BMC Firmware is a firmware from Asus China. The ASUS BMC Firmware suffers from a path traversal vulnerability that stems from the Record video file function not filtering specific parameters. A remote attacker could use this vulnerability to gain administrator privileges and then traverse...

PT-2021-17799

Name of the Vulnerable Software and Affected Versions: ASUS BMC affected versions not specified Description: A buffer overflow issue exists due to the failure of a specific function in the Web management page to verify the string length entered by users. This allows remote attackers to abnormally...

PT-2021-17823

Name of the Vulnerable Software and Affected Versions: ASUS BMC affected versions not specified Description: The issue concerns a function in the ASUS BMC's firmware Web management page, specifically the Get Help file function, which fails to filter a specific parameter. This allows remote...

ASUS BMC Firmware 安全特征问题漏洞

ASUS BMC Firmware is a firmware from Asus China. The ASUS BMC Firmware suffers from a security signature issue vulnerability that stems from a buffer overflow vulnerability due to a specific function not validating the length of a user-entered string. A remote attacker could exploit the...

ASUS BMC Firmware 安全特征问题漏洞

ASUS BMC Firmware is a firmware from Asus China. A security signature issue vulnerability exists in the ASUS BMC Firmware Web management page, which originates from a buffer overflow vulnerability caused by the CD media configuration function not validating the length of a user-entered string. A...

ASUS BMC Firmware 路径遍历漏洞

ASUS BMC Firmware is a firmware from Asus China. ASUS BMC suffers from a path traversal vulnerability, which can be exploited by an attacker to gain administrator privileges to access system files via path traversal...

CVE-2021-28177: Buffer Copy without Checking Size of Input

The LDAP configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service...

CVE-2021-28203: Improper Neutralization of Special Elements used in an OS Command

The Web Set Media Image function in ASUS BMC’s firmware Web management page does not filter the specific parameter. As obtaining the administrator permission, remote attackers can launch command injection to execute command arbitrary...

CVE-2021-28201: Buffer Copy without Checking Size of Input

The Service configuration-1 function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service...

CVE-2021-28199: Buffer Copy without Checking Size of Input

The specific function in ASUS BMC’s firmware Web management page Modify user’s information function does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate th...

CVE-2021-28194: Buffer Copy without Checking Size of Input

The specific function in ASUS BMC’s firmware Web management page Remote image configuration setting does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate th...

CVE-2021-28207: Improper Limitation of a Pathname to a Restricted Directory

The specific function in ASUS BMC’s firmware Web management page Get Help file function does not filter the specific parameter. As obtaining the administrator permission, remote attackers can use the means of path traversal to access system files...