CVE-2021-28203 ASUS BMC's firmware: command injection - Web Set Media Image function

The Web Set Media Image function in ASUS BMC’s firmware Web management page does not filter the specific parameter. As obtaining the administrator permission, remote attackers can launch command injection to execute command arbitrary...

CVE-2021-28202

The CVE-2021-28202 case concerns ASUS BMC firmware’s Web management page, where the Service configuration-2 function does not validate user-entered string length, causing a buffer overflow. The underlying flaw is improper input length handling in the Web interface, leading to a vulnerability that...

CVE-2021-28202 ASUS BMC's firmware: buffer overflow - Service configuration-2 function

The Service configuration-2 function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service...

CVE-2021-28203

CVE-2021-28203 concerns ASUS BMC firmware where the Web management page’s Web Set Media Image function does not filter a specific parameter. This leads to a remote command-injection vulnerability that requires administrator privileges to exploit, enabling arbitrary command execution. Connected so...

CVE-2021-28201 ASUS BMC's firmware: buffer overflow - Service configuration-1 function

The Service configuration-1 function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service...

CVE-2021-28201

ASUS BMC firmware Web management page vulnerability where the Service configuration-1 function does not validate the length of user input, causing a buffer overflow. Remote attackers could terminate the Web service. CVSS‑3.1 base score 4.9 (AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H). Exploitation statu...

CVE-2021-28200 ASUS BMC's firmware: buffer overflow - CD media configuration function

The CD media configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service...

CVE-2021-28199

CVE-2021-28199 affects ASUS BMC firmware: the Web management page’s “Modify user’s information” function does not verify the length of user-entered strings, causing a buffer overflow. This could allow a remote attacker with privileges to terminate the Web service (as indicated by CVSS/impact data...

CVE-2021-28198 ASUS BMC's firmware: buffer overflow - Firmware protocol configuration

The Firmware protocol configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web servic...

CVE-2021-28197

CVE-2021-28197 concerns ASUS BMC firmware: the Active Directory configuration function on the Web management page does not verify the string length, causing a buffer overflow in the web interface. The vulnerability arises from improper input length validation in the AD configuration, enabling rem...

CVE-2021-28196

The CVE-2021-28196 issue affects ASUS BMC firmware Web management (Generate SSL certificate function). The root cause is failure to validate user-entered string length, leading to a buffer overflow. This could allow remote attackers with privileged access to terminate the Web service via leakage ...

CVE-2021-28196 ASUS BMC's firmware: buffer overflow - Generate SSL certificate function

The specific function in ASUS BMC’s firmware Web management page Generate SSL certificate function does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the...

CVE-2021-28195 ASUS BMC's firmware: buffer overflow - Radius configuration function

The Radius configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service...

CVE-2021-28195

The CVE-2021-28195 entry concerns ASUS BMC firmware’s Web management page. The Radius configuration function does not validate the length of user-entered strings, causing a buffer overflow. Reported impact: a remote attacker could exploit this to terminate the Web service after gaining privileged...

CVE-2021-28194

CVE-2021-28194 is a buffer overflow vulnerability in ASUS BMC firmware Web management page (Remote image configuration setting) caused by a function not validating the length of user-entered strings. The issue allows remote attackers to terminate the Web service via leakage after gaining privileg...

CVE-2021-28193 ASUS BMC's firmware: buffer overflow - SMTP configuration function

The SMTP configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service...

CVE-2021-28193

The vulnerability is in ASUS BMC firmware Web management page: the SMTP configuration function does not verify the length of user input, causing a buffer overflow. This could allow remote attackers, with privileged access, to trigger abnormal termination of the Web service. Affected: ASUS BMC fir...

CVE-2021-28191 ASUS BMC's firmware: buffer overflow - Firmware update function

The Firmware update function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service...

CVE-2021-28192

The CVE-2021-28192 entry describes a buffer overflow in ASUS BMC firmware's Web management page, specifically in the Remote video storage function, caused by insufficient validation of user-entered string lengths. This allows a remote attacker with privileged access to overflow a buffer and cause...

CVE-2021-28191

ASUS BMC firmware Web management page: The firmware update function does not validate input string length, causing a buffer overflow. This can allow a remote attacker with privileged access to cause the web service to terminate abnormally. Documented in CVE-2021-28191 and corroborated by CNVD-202...