CVE-2021-28194: Buffer Copy without Checking Size of Input

The specific function in ASUS BMC’s firmware Web management page Remote image configuration setting does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate th...

CVE-2021-28207: Improper Limitation of a Pathname to a Restricted Directory

The specific function in ASUS BMC’s firmware Web management page Get Help file function does not filter the specific parameter. As obtaining the administrator permission, remote attackers can use the means of path traversal to access system files...

CVE-2021-28184: Buffer Copy without Checking Size of Input

The Active Directory configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service...

CVE-2021-28202: Buffer Copy without Checking Size of Input

The Service configuration-2 function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service...

CVE-2021-28186: Buffer Copy without Checking Size of Input

The specific function in ASUS BMC’s firmware Web management page ActiveX configuration-2 acquisition does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate t...

PT-2021-17791

Name of the Vulnerable Software and Affected Versions: ASUS BMC firmware affected versions not specified Description: The issue arises from the Radius configuration function in the firmware's Web management page, which fails to verify the string length entered by users. This oversight results in ...

CVE-2021-28204: Improper Neutralization of Special Elements used in an OS Command

The specific function in ASUS BMC’s firmware Web management page Modify user’s information function does not filter the specific parameter. As obtaining the administrator permission, remote attackers can launch command injection to execute command arbitrary...

PT-2021-17798

Name of the Vulnerable Software and Affected Versions: ASUS BMC firmware affected versions not specified Description: The issue arises from the Web Service configuration function in the firmware's Web management page, which fails to verify the string length entered by users. This oversight leads ...

PT-2021-17819

Name of the Vulnerable Software and Affected Versions: ASUS BMC affected versions not specified Description: The issue concerns the Web Set Media Image function in ASUS BMC's firmware Web management page, which fails to filter a specific parameter. This allows remote attackers, who have obtained...

PT-2021-17811

Name of the Vulnerable Software and Affected Versions: ASUS BMC firmware affected versions not specified Description: The issue arises from the Radius configuration function in the firmware's Web management page, which fails to verify the string length entered by users. This oversight results in ...

PT-2021-17820

Name of the Vulnerable Software and Affected Versions: ASUS BMC affected versions not specified Description: The issue concerns a function in the ASUS BMC's firmware Web management page, specifically the Modify user's information function, which fails to filter a specific parameter. This allows...

CVE-2021-28188: Buffer Copy without Checking Size of Input

The specific function in ASUS BMC’s firmware Web management page Modify user’s information function does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate th...

PT-2021-17824

Name of the Vulnerable Software and Affected Versions: ASUS BMC affected versions not specified Description: The issue concerns a specific function in the ASUS BMC's firmware Web management page, namely the Get video file function, which fails to filter a specific parameter. This allows remote...

PT-2021-17801

Name of the Vulnerable Software and Affected Versions: ASUS BMC affected versions not specified Description: The issue arises from a specific function in the ASUS BMC's firmware Web management page, specifically the ActiveX configuration-1 acquisition, which fails to verify the string length...

CVE-2021-28193: Buffer Copy without Checking Size of Input

The SMTP configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service...

CVE-2021-28178: Buffer Copy without Checking Size of Input

The UEFI configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service...

CVE-2021-28182: Buffer Copy without Checking Size of Input

The Web Service configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service...

CVE-2021-28198: Buffer Copy without Checking Size of Input

The Firmware protocol configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web servic...

CVE-2021-28208: Improper Limitation of a Pathname to a Restricted Directory

The specific function in ASUS BMC’s firmware Web management page Get video file function does not filter the specific parameter. As obtaining the administrator permission, remote attackers can use the means of path traversal to access system files...

CVE-2021-28192: Buffer Copy without Checking Size of Input

The specific function in ASUS BMC’s firmware Web management page Remote video storage function does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web...