CVE-2021-28208: Improper Limitation of a Pathname to a Restricted Directory

The specific function in ASUS BMC’s firmware Web management page Get video file function does not filter the specific parameter. As obtaining the administrator permission, remote attackers can use the means of path traversal to access system files...

CVE-2021-28187: Buffer Copy without Checking Size of Input

The specific function in ASUS BMC’s firmware Web management page Generate new SSL certificate does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web...

ASUS BMC Firmware 安全特征问题漏洞

ASUS BMC Firmware is a firmware from Asus China. A buffer overflow vulnerability exists in the ASUS BMC firmware Web management page, which originates from a specific function that does not validate the length of a user-entered string, and can be exploited by a remote attacker to terminate a Web...

PT-2021-17805

Name of the Vulnerable Software and Affected Versions: ASUS BMC firmware affected versions not specified Description: The issue arises from the SMTP configuration function in the firmware's Web management page, which fails to verify the string length entered by users. This oversight results in a...

CVE-2021-28200: Buffer Copy without Checking Size of Input

The CD media configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service...

CVE-2021-28196: Buffer Copy without Checking Size of Input

The specific function in ASUS BMC’s firmware Web management page Generate SSL certificate function does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the...

CVE-2021-28180: Buffer Copy without Checking Size of Input

The specific function in ASUS BMC’s firmware Web management page Audit log configuration setting does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the W...

ASUS BMC Firmware 安全特征问题漏洞

ASUS BMC Firmware is a firmware from Asus China. A security signature issue vulnerability exists in the ASUS BMC firmware Web management page, which originates from a buffer overflow vulnerability due to the Active Directory configuration function not validating the length of a string entered by ...

PT-2021-17817

Name of the Vulnerable Software and Affected Versions: ASUS BMC firmware affected versions not specified Description: The issue arises from the Service configuration-1 function in the ASUS BMC’s firmware Web management page, which fails to verify the string length entered by users. This oversight...

PT-2021-17809

Name of the Vulnerable Software and Affected Versions: ASUS BMC affected versions not specified Description: The issue arises from the SMTP configuration function in the firmware's Web management page, which fails to verify the string length entered by users. This oversight leads to a buffer...

ASUS BMC Firmware 路径遍历漏洞

ASUS BMC Firmware is a firmware from Asus China. A path traversal vulnerability exists in the ASUS BMC Firmware Web management page, which stems from the Delete SOL video file function not filtering specific parameters. A remote attacker could use this vulnerability to gain administrator privileg...

PT-2021-17825

Name of the Vulnerable Software and Affected Versions: ASUS BMC affected versions not specified Description: The issue concerns a function in the ASUS BMC's firmware Web management page, specifically the Delete video file function, which fails to filter a specific parameter. This allows remote...

PT-2021-17804

Name of the Vulnerable Software and Affected Versions: ASUS BMC firmware affected versions not specified Description: The issue arises from a function in the ASUS BMC's firmware Web management page, specifically the Modify user's information function, which fails to verify the string length enter...

CVE-2021-28181: Buffer Copy without Checking Size of Input

The specific function in ASUS BMC’s firmware Web management page Remote video configuration setting does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate th...

PT-2021-17808

Name of the Vulnerable Software and Affected Versions: ASUS BMC affected versions not specified Description: A buffer overflow issue exists due to the failure of a specific function in the firmware's Web management page to verify the string length entered by users. This allows remote attackers to...

CVE-2021-28206: Improper Limitation of a Pathname to a Restricted Directory

The specific function in ASUS BMC’s firmware Web management page Record video file function does not filter the specific parameter. As obtaining the administrator permission, remote attackers can use the means of path traversal to access system files...

ASUS BMC Firmware 安全特征问题漏洞

ASUS BMC Firmware is a firmware from Asus China. A security signature issue vulnerability exists in the ASUS BMC firmware Web management page, which originates from a buffer overflow vulnerability due to the Firmware update function not validating the length of a user-entered string. A remote...

ASUS BMC Firmware 安全特征问题漏洞

ASUS BMC Firmware is a firmware from Asus China. A buffer overflow vulnerability exists in the ASUS BMC's firmware Web management page, which originates from the Web Service configuration function not validating the length of a string entered by the user, and can be exploited by a remote attacker...

CVE-2021-28189: Buffer Copy without Checking Size of Input

The SMTP configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service...

CVE-2021-28188: Buffer Copy without Checking Size of Input

The specific function in ASUS BMC’s firmware Web management page Modify user’s information function does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate th...