CVE-2021-28201 ASUS BMC's firmware: buffer overflow - Service configuration-1 function

The Service configuration-1 function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service...

CVE-2021-28201: Buffer Copy without Checking Size of Input

The Service configuration-1 function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service...

PT-2021-17817

Name of the Vulnerable Software and Affected Versions: ASUS BMC firmware affected versions not specified Description: The issue arises from the Service configuration-1 function in the ASUS BMC’s firmware Web management page, which fails to verify the string length entered by users. This oversight...