CVE-2021-28193

The vulnerability is in ASUS BMC firmware Web management page: the SMTP configuration function does not verify the length of user input, causing a buffer overflow. This could allow remote attackers, with privileged access, to trigger abnormal termination of the Web service. Affected: ASUS BMC fir...

CVE-2021-28192

The CVE-2021-28192 entry describes a buffer overflow in ASUS BMC firmware's Web management page, specifically in the Remote video storage function, caused by insufficient validation of user-entered string lengths. This allows a remote attacker with privileged access to overflow a buffer and cause...

CVE-2021-28191 ASUS BMC's firmware: buffer overflow - Firmware update function

The Firmware update function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service...

CVE-2021-28192 ASUS BMC's firmware: buffer overflow - Remote video storage function

The specific function in ASUS BMC’s firmware Web management page Remote video storage function does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web...

CVE-2021-28191

ASUS BMC firmware Web management page: The firmware update function does not validate input string length, causing a buffer overflow. This can allow a remote attacker with privileged access to cause the web service to terminate abnormally. Documented in CVE-2021-28191 and corroborated by CNVD-202...

CVE-2021-28190 ASUS BMC's firmware: buffer overflow - Generate new certificate function

The specific function in ASUS BMC’s firmware Web management page Generate new certificate function does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the...

CVE-2021-28190

The CVE-2021-28190 issue affects ASUS BMC firmware Web management (Generate new certificate function). The root cause is a buffer overflow caused by not validating the length of user-input strings in that function. Impact stated in sources: remote attackers could leverage the overflow to cause a ...

CVE-2021-28189 ASUS BMC's firmware: buffer overflow - SMTP configuration function

The SMTP configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service...

CVE-2021-28189

The CVE-2021-28189 entry describes a buffer overflow in the SMTP configuration function of ASUS BMC’s firmware Web management page caused by unvalidated string length. This is a Web service impact vulnerability leading to abnormal termination via remote access. Connected sources (CNVD/CNNVD/NVD) ...

CVE-2021-28187 ASUS BMC's firmware: buffer overflow - Generate new SSL certificate

The specific function in ASUS BMC’s firmware Web management page Generate new SSL certificate does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web...

CVE-2021-28188

The CVE-2021-28188 entry concerns ASUS BMC firmware: the Web management page’s Modify user’s information function does not validate the length of user-entered strings, causing a buffer overflow. The root cause is improper input length handling in that function. Impact described in sources is remo...

CVE-2021-28188 ASUS BMC's firmware: buffer overflow - Modify user’s information function

The specific function in ASUS BMC’s firmware Web management page Modify user’s information function does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate th...

CVE-2021-28187

The CVE-2021-28187 entry concerns ASUS BMC firmware’s Web management page, specifically the Generate new SSL certificate function. The root cause is failure to validate the length of user-entered strings, leading to a Buffer Overflow. Reported impact states that a remote attacker could use this l...

CVE-2021-28186

CVE-2021-28186 concerns the ASUS BMC firmware Web management page (ActiveX configuration-2 acquisition). A vulnerability arises because a specific function does not validate the length of user-supplied strings, causing a buffer overflow. Remote attackers could leverage this to terminate the Web s...

CVE-2021-28185 ASUS BMC's firmware: buffer overflow - ActiveX configuration-1 acquisition

The specific function in ASUS BMC’s firmware Web management page ActiveX configuration-1 acquisition does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate t...

CVE-2021-28185

CVE-2021-28185 affects ASUS BMC firmware: the Web management page’s ActiveX configuration-1 acquisition function does not validate the length of user-supplied strings, causing a buffer overflow. This can allow a remote attacker to cause the Web service to terminate, impacting availability. Connec...

CVE-2021-28184 ASUS BMC's firmware: buffer overflow - Active Directory configuration function

The Active Directory configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service...

CVE-2021-28184

The CVE-2021-28184 entry affects ASUS BMC firmware Web management, where the Active Directory configuration function does not validate input string length, causing a buffer overflow. This vulnerability can allow remote attackers to cause a Web service termination by exploiting the overflow. The i...

CVE-2021-28182 ASUS BMC's firmware: buffer overflow - Web Service configuration function

The Web Service configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service...

CVE-2021-28183

The CVE-2021-28183 issue affects ASUS BMC firmware Web management page (Web License configuration setting). A specific function does not validate the length of user-supplied strings, causing a buffer overflow. This could allow remote attackers with privileged access to trigger a crash and abnorma...