CVE-2021-28199

The specific function in ASUS BMC’s firmware Web management page Modify user’s information function does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate th...

CVE-2021-28199

The ASUS BMC Firmware Web management page is vulnerable to a buffer overflow within the Modify user’s information function . The root cause is a failure to verify the length of user-entered strings. A remote attacker with privileged permissions could exploit this vulnerability to cause a leakage ...