PT-2021-17818

Name of the Vulnerable Software and Affected Versions: ASUS BMC firmware affected versions not specified Description: The issue arises from the Service configuration-2 function in the ASUS BMC’s firmware Web management page, which fails to verify the string length entered by users. This oversight...

PT-2021-17825

Name of the Vulnerable Software and Affected Versions: ASUS BMC affected versions not specified Description: The issue concerns a function in the ASUS BMC's firmware Web management page, specifically the Delete video file function, which fails to filter a specific parameter. This allows remote...

PT-2021-17804

Name of the Vulnerable Software and Affected Versions: ASUS BMC firmware affected versions not specified Description: The issue arises from a function in the ASUS BMC's firmware Web management page, specifically the Modify user's information function, which fails to verify the string length enter...

CVE-2021-28181: Buffer Copy without Checking Size of Input

The specific function in ASUS BMC’s firmware Web management page Remote video configuration setting does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate th...

PT-2021-17808

Name of the Vulnerable Software and Affected Versions: ASUS BMC affected versions not specified Description: A buffer overflow issue exists due to the failure of a specific function in the firmware's Web management page to verify the string length entered by users. This allows remote attackers to...

CVE-2021-28206: Improper Limitation of a Pathname to a Restricted Directory

The specific function in ASUS BMC’s firmware Web management page Record video file function does not filter the specific parameter. As obtaining the administrator permission, remote attackers can use the means of path traversal to access system files...

ASUS BMC Firmware 路径遍历漏洞

ASUS BMC Firmware is a firmware from Asus China. The ASUS BMC Firmware suffers from a path traversal vulnerability that stems from the Record video file function not filtering specific parameters. A remote attacker could use this vulnerability to gain administrator privileges and then traverse...

ASUS BMC Firmware 安全特征问题漏洞

ASUS BMC Firmware is a firmware from Asus China. A security signature issue vulnerability exists in the ASUS BMC firmware Web management page, which originates from a buffer overflow vulnerability due to the Firmware update function not validating the length of a user-entered string. A remote...

ASUS BMC Firmware 安全特征问题漏洞

ASUS BMC Firmware is a firmware from Asus China. A security signature issue vulnerability exists in the ASUS BMC Firmware Web management page, which originates from a buffer overflow vulnerability due to a specific function not validating the length of a user-entered string. A remote attacker cou...

PT-2021-17813

Name of the Vulnerable Software and Affected Versions: ASUS BMC firmware affected versions not specified Description: The Active Directory configuration function in the firmware's Web management page does not verify the string length entered by users, resulting in a buffer overflow issue. This...

CVE-2021-28187: Buffer Copy without Checking Size of Input

The specific function in ASUS BMC’s firmware Web management page Generate new SSL certificate does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web...

CVE-2021-28175: Buffer Copy without Checking Size of Input

The Radius configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service...