CVE-2021-28199

The specific function in ASUS BMC’s firmware Web management page Modify user’s information function does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate th...

CVE-2021-28199

CVE-2021-28199 affects ASUS BMC firmware: the Web management page’s “Modify user’s information” function does not verify the length of user-entered strings, causing a buffer overflow. This could allow a remote attacker with privileges to terminate the Web service (as indicated by CVSS/impact data...