PT-2021-17814

Name of the Vulnerable Software and Affected Versions: ASUS BMC affected versions not specified Description: The issue arises from the Firmware protocol configuration function in the ASUS BMC's firmware Web management page, which fails to verify the string length entered by users. This oversight...

CVE-2021-28198: Buffer Copy without Checking Size of Input

The Firmware protocol configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web servic...