Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-28189 State: PUBLISHED Published: 2021-04-06T05:02:09.503866Z Last Updated: 2024-09-17T02:21:09.330Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H) Vendors: ASUS Products: BMC firmware for Z10PR-D16, BMC firmware for ASMB8-iKVM, BMC firmware for Z10PE-D16 WS Problem Types: CWE-120 Description: The SMTP configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service. Additional Analyst Notes: - CVE Program Container: References: - https://ww
age to abnormally terminate the Web service. Additional Analyst Notes: - CVE Program Container: References: - https://www.asus.com/content/ASUS-Product-Security-Advisory/ - https://www.asus.com/tw/support/callus/ - https://www.twcert.org.tw/tw/cp-132-4559-ad2b5-1.html
CVE ID: CVE-2021-28190 State: PUBLISHED Published: 2021-04-06T05:02:10.261465Z Last Updated: 2024-09-16T17:38:41.015Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H) Vendors: ASUS Products: BMC firmware for ASMB9-iKVM, BMC firmware for RS720A-E9-RS24-E, BMC firmware for RS700A-E9-RS4, BMC firmware for RS700-E9-RS4, BMC firmware for ESC4000 G4X, BMC firmware for RS700-E9-RS12, BMC firmware for RS100-E10-PI2, BMC firmware for RS300-E10-PS4, BMC firmware for RS300-E10-RS4, BMC firmware for RS500A-E9-PS4, BMC firmware for RS500A-E9-RS4, BMC firmware for RS500A-E9 RS4, BMC firmware for E700 G4, BMC firmware for WS C422 PRO/SE, BMC firmware for WS X299 PRO/SE, BMC firmware
RS500A-E9 RS4, BMC firmware for E700 G4, BMC firmware for WS C422 PRO/SE, BMC firmware for WS X299 PRO/SE, BMC firmware for Z11PA-U12, BMC firmware for Z11PA-U12/10G-2S, BMC firmware for KNPA-U16, BMC firmware for ESC4000 DHD G4, BMC firmware for ESC4000 G4, BMC firmware for RS720Q-E9-RS24-S, BMC firmware for RS720Q-E9-RS8, BMC firmware for RS720Q-E9-RS8-S, BMC firmware for Z11PA-D8, BMC firmware for Z11PA-D8C, BMC firmware for RS720-E9-RS24-U, BMC firmware for RS720-E9-RS8-G, BMC firmware for RS500-E9-PS4, BMC firmware for Pro E800 G4, BMC firmware for RS500-E9-RS4, BMC firmware for RS500-E9-RS4-U, BMC firmware for RS520-E9-RS12-E, BMC firmware for RS520-E9-RS8, BMC firmware for ESC8000 G4
irmware for RS500-E9-RS4-U, BMC firmware for RS520-E9-RS12-E, BMC firmware for RS520-E9-RS8, BMC firmware for ESC8000 G4, BMC firmware for ESC8000 G4/10G, BMC firmware for RS720-E9-RS12-E, BMC firmware for WS C621E SAGE, BMC firmware for RS500A-E10-PS4, BMC firmware for RS500A-E10-RS4, BMC firmware for RS700A-E9-RS12V2, BMC firmware for RS700A-E9-RS4V2, BMC firmware for RS720A-E9-RS12V2, BMC firmware for RS720A-E9-RS24V2, BMC firmware for Z11PR-D16 Problem Types: CWE-120 Description: The specific function in ASUS BMC’s firmware Web management page (Generate new certificate function) does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining
function) does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service. Additional Analyst Notes: - CVE Program Container: References: - https://www.asus.com/content/ASUS-Product-Security-Advisory/ - https://www.asus.com/tw/support/callus/ - https://www.twcert.org.tw/tw/cp-132-4560-2f01f-1.html
CVE ID: CVE-2021-28191 State: PUBLISHED Published: 2021-04-06T05:02:11.043489Z Last Updated: 2024-09-16T19:10:32.661Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H) Vendors: ASUS Products: BMC firmware for ASMB9-iKVM, BMC firmware for RS720A-E9-RS24-E, BMC firmware for RS700A-E9-RS4, BMC firmware for RS700-E9-RS4, BMC firmware for ESC4000 G4X, BMC firmware for RS700-E9-RS12, BMC firmware for RS100-E10-PI2, BMC firmware for RS300-E10-PS4, BMC firmware for RS300-E10-RS4, BMC firmware for RS500A-E9-PS4, BMC firmware for RS500A-E9-RS4, BMC firmware for RS500A-E9 RS4, BMC firmware for E700 G4, BMC firmware for WS C422 PRO/SE, BMC firmware for WS X299 PRO/SE, BMC firmware
irmware for RS500-E9-RS4-U, BMC firmware for RS520-E9-RS12-E, BMC firmware for RS520-E9-RS8, BMC firmware for ESC8000 G4, BMC firmware for ESC8000 G4/10G, BMC firmware for RS720-E9-RS12-E, BMC firmware for WS C621E SAGE, BMC firmware for RS500A-E10-PS4, BMC firmware for RS500A-E10-RS4, BMC firmware for RS700A-E9-RS12V2, BMC firmware for RS700A-E9-RS4V2, BMC firmware for RS720A-E9-RS12V2, BMC firmware for RS720A-E9-RS24V2, BMC firmware for Z11PR-D16 Problem Types: CWE-120 Description: The Firmware update function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, r
string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service. Additional Analyst Notes: - CVE Program Container: References: - https://www.asus.com/content/ASUS-Product-Security-Advisory/ - https://www.asus.com/tw/support/callus/ - https://www.twcert.org.tw/tw/cp-132-4561-062d0-1.html
CVE ID: CVE-2021-28192 State: PUBLISHED Published: 2021-04-06T05:02:11.814209Z Last Updated: 2024-09-17T03:28:44.149Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H) Vendors: ASUS Products: BMC firmware for ASMB9-iKVM, BMC firmware for RS720A-E9-RS24-E, BMC firmware for RS700A-E9-RS4, BMC firmware for RS700-E9-RS4, BMC firmware for ESC4000 G4X, BMC firmware for RS700-E9-RS12, BMC firmware for RS100-E10-PI2, BMC firmware for RS300-E10-PS4, BMC firmware for RS300-E10-RS4, BMC firmware for RS500A-E9-PS4, BMC firmware for RS500A-E9-RS4, BMC firmware for RS500A-E9 RS4, BMC firmware for E700 G4, BMC firmware for WS C422 PRO/SE, BMC firmware for WS X299 PRO/SE, BMC firmware
irmware for RS500-E9-RS4-U, BMC firmware for RS520-E9-RS12-E, BMC firmware for RS520-E9-RS8, BMC firmware for ESC8000 G4, BMC firmware for ESC8000 G4/10G, BMC firmware for RS720-E9-RS12-E, BMC firmware for WS C621E SAGE, BMC firmware for RS500A-E10-PS4, BMC firmware for RS500A-E10-RS4, BMC firmware for RS700A-E9-RS12V2, BMC firmware for RS700A-E9-RS4V2, BMC firmware for RS720A-E9-RS12V2, BMC firmware for RS720A-E9-RS24V2, BMC firmware for Z11PR-D16 Problem Types: CWE-120 Description: The specific function in ASUS BMC’s firmware Web management page (Remote video storage function) does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the
tion) does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service. Additional Analyst Notes: - CVE Program Container: References: - https://www.asus.com/content/ASUS-Product-Security-Advisory/ - https://www.asus.com/tw/support/callus/ - https://www.twcert.org.tw/tw/cp-132-4562-4b207-1.html
CVE ID: CVE-2021-28193 State: PUBLISHED Published: 2021-04-06T05:02:12.723266Z Last Updated: 2024-09-17T03:48:35.862Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H) Vendors: ASUS Products: BMC firmware for ASMB9-iKVM, BMC firmware for RS720A-E9-RS24-E, BMC firmware for RS700A-E9-RS4, BMC firmware for RS700-E9-RS4, BMC firmware for ESC4000 G4X, BMC firmware for RS700-E9-RS12, BMC firmware for RS100-E10-PI2, BMC firmware for RS300-E10-PS4, BMC firmware for RS300-E10-RS4, BMC firmware for RS500A-E9-PS4, BMC firmware for RS500A-E9-RS4, BMC firmware for RS500A-E9 RS4, BMC firmware for E700 G4, BMC firmware for WS C422 PRO/SE, BMC firmware for WS X299 PRO/SE, BMC firmware
irmware for RS500-E9-RS4-U, BMC firmware for RS520-E9-RS12-E, BMC firmware for RS520-E9-RS8, BMC firmware for ESC8000 G4, BMC firmware for ESC8000 G4/10G, BMC firmware for RS720-E9-RS12-E, BMC firmware for WS C621E SAGE, BMC firmware for RS500A-E10-PS4, BMC firmware for RS500A-E10-RS4, BMC firmware for RS700A-E9-RS12V2, BMC firmware for RS700A-E9-RS4V2, BMC firmware for RS720A-E9-RS12V2, BMC firmware for RS720A-E9-RS24V2, BMC firmware for Z11PR-D16 Problem Types: CWE-120 Description: The SMTP configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission
the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service. Additional Analyst Notes: - CVE Program Container: References: - https://www.asus.com/content/ASUS-Product-Security-Advisory/ - https://www.asus.com/tw/support/callus/ - https://www.twcert.org.tw/tw/cp-132-4563-e4092-1.html
CVE ID: CVE-2021-28194 State: PUBLISHED Published: 2021-04-06T05:02:13.511619Z Last Updated: 2024-09-17T04:09:52.489Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H) Vendors: ASUS Products: BMC firmware for ASMB9-iKVM, BMC firmware for RS720A-E9-RS24-E, BMC firmware for RS700A-E9-RS4, BMC firmware for RS700-E9-RS4, BMC firmware for ESC4000 G4X, BMC firmware for RS700-E9-RS12, BMC firmware for RS100-E10-PI2, BMC firmware for RS300-E10-PS4, BMC firmware for RS300-E10-RS4, BMC firmware for RS500A-E9-PS4, BMC firmware for RS500A-E9-RS4, BMC firmware for RS500A-E9 RS4, BMC firmware for E700 G4, BMC firmware for WS C422 PRO/SE, BMC firmware for WS X299 PRO/SE, BMC firmware
irmware for RS500-E9-RS4-U, BMC firmware for RS520-E9-RS12-E, BMC firmware for RS520-E9-RS8, BMC firmware for ESC8000 G4, BMC firmware for ESC8000 G4/10G, BMC firmware for RS720-E9-RS12-E, BMC firmware for WS C621E SAGE, BMC firmware for RS500A-E10-PS4, BMC firmware for RS500A-E10-RS4, BMC firmware for RS700A-E9-RS12V2, BMC firmware for RS700A-E9-RS4V2, BMC firmware for RS720A-E9-RS12V2, BMC firmware for RS720A-E9-RS24V2, BMC firmware for Z11PR-D16 Problem Types: CWE-120 Description: The specific function in ASUS BMC’s firmware Web management page (Remote image configuration setting) does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtainin
n setting) does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service. Additional Analyst Notes: - CVE Program Container: References: - https://www.asus.com/content/ASUS-Product-Security-Advisory/ - https://www.asus.com/tw/support/callus/ - https://www.twcert.org.tw/tw/cp-132-4564-7ef3d-1.html
CVE ID: CVE-2021-28195 State: PUBLISHED Published: 2021-04-06T05:02:14.363175Z Last Updated: 2024-09-16T20:21:46.585Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H) Vendors: ASUS Products: BMC firmware for ASMB9-iKVM, BMC firmware for RS720A-E9-RS24-E, BMC firmware for RS700A-E9-RS4, BMC firmware for RS700-E9-RS4, BMC firmware for ESC4000 G4X, BMC firmware for RS700-E9-RS12, BMC firmware for RS100-E10-PI2, BMC firmware for RS300-E10-PS4, BMC firmware for RS300-E10-RS4, BMC firmware for RS500A-E9-PS4, BMC firmware for RS500A-E9-RS4, BMC firmware for RS500A-E9 RS4, BMC firmware for E700 G4, BMC firmware for WS C422 PRO/SE, BMC firmware for WS X299 PRO/SE, BMC firmware
irmware for RS500-E9-RS4-U, BMC firmware for RS520-E9-RS12-E, BMC firmware for RS520-E9-RS8, BMC firmware for ESC8000 G4, BMC firmware for ESC8000 G4/10G, BMC firmware for RS720-E9-RS12-E, BMC firmware for WS C621E SAGE, BMC firmware for RS500A-E10-PS4, BMC firmware for RS500A-E10-RS4, BMC firmware for RS700A-E9-RS12V2, BMC firmware for RS700A-E9-RS4V2, BMC firmware for RS720A-E9-RS12V2, BMC firmware for RS720A-E9-RS24V2, BMC firmware for Z11PR-D16 Problem Types: CWE-120 Description: The Radius configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permissi
y the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service. Additional Analyst Notes: - CVE Program Container: References: - https://www.asus.com/content/ASUS-Product-Security-Advisory/ - https://www.asus.com/tw/support/callus/ - https://www.twcert.org.tw/tw/cp-132-4565-59c97-1.html
CVE ID: CVE-2021-28196 State: PUBLISHED Published: 2021-04-06T05:02:15.183407Z Last Updated: 2024-09-16T19:05:01.471Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H) Vendors: ASUS Products: BMC firmware for ASMB9-iKVM, BMC firmware for RS720A-E9-RS24-E, BMC firmware for RS700A-E9-RS4, BMC firmware for RS700-E9-RS4, BMC firmware for ESC4000 G4X, BMC firmware for RS700-E9-RS12, BMC firmware for RS100-E10-PI2, BMC firmware for RS300-E10-PS4, BMC firmware for RS300-E10-RS4, BMC firmware for RS500A-E9-PS4, BMC firmware for RS500A-E9-RS4, BMC firmware for RS500A-E9 RS4, BMC firmware for E700 G4, BMC firmware for WS C422 PRO/SE, BMC firmware for WS X299 PRO/SE, BMC firmware
irmware for RS500-E9-RS4-U, BMC firmware for RS520-E9-RS12-E, BMC firmware for RS520-E9-RS8, BMC firmware for ESC8000 G4, BMC firmware for ESC8000 G4/10G, BMC firmware for RS720-E9-RS12-E, BMC firmware for WS C621E SAGE, BMC firmware for RS500A-E10-PS4, BMC firmware for RS500A-E10-RS4, BMC firmware for RS700A-E9-RS12V2, BMC firmware for RS700A-E9-RS4V2, BMC firmware for RS720A-E9-RS12V2, BMC firmware for RS720A-E9-RS24V2, BMC firmware for Z11PR-D16 Problem Types: CWE-120 Description: The specific function in ASUS BMC’s firmware Web management page (Generate SSL certificate function) does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining
function) does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service. Additional Analyst Notes: - CVE Program Container: References: - https://www.asus.com/content/ASUS-Product-Security-Advisory/ - https://www.asus.com/tw/support/callus/ - https://www.twcert.org.tw/tw/cp-132-4566-9154b-1.html
CVE ID: CVE-2021-28197 State: PUBLISHED Published: 2021-04-06T05:02:16.045312Z Last Updated: 2024-09-16T19:10:07.924Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H) Vendors: ASUS Products: BMC firmware for ASMB9-iKVM, BMC firmware for RS720A-E9-RS24-E, BMC firmware for RS700A-E9-RS4, BMC firmware for RS700-E9-RS4, BMC firmware for ESC4000 G4X, BMC firmware for RS700-E9-RS12, BMC firmware for RS100-E10-PI2, BMC firmware for RS300-E10-PS4, BMC firmware for RS300-E10-RS4, BMC firmware for RS500A-E9-PS4, BMC firmware for RS500A-E9-RS4, BMC firmware for RS500A-E9 RS4, BMC firmware for E700 G4, BMC firmware for WS C422 PRO/SE, BMC firmware for WS X299 PRO/SE, BMC firmware
irmware for RS500-E9-RS4-U, BMC firmware for RS520-E9-RS12-E, BMC firmware for RS520-E9-RS8, BMC firmware for ESC8000 G4, BMC firmware for ESC8000 G4/10G, BMC firmware for RS720-E9-RS12-E, BMC firmware for WS C621E SAGE, BMC firmware for RS500A-E10-PS4, BMC firmware for RS500A-E10-RS4, BMC firmware for RS700A-E9-RS12V2, BMC firmware for RS700A-E9-RS4V2, BMC firmware for RS720A-E9-RS12V2, BMC firmware for RS720A-E9-RS24V2, BMC firmware for Z11PR-D16 Problem Types: CWE-120 Description: The Active Directory configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privilege
not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service. Additional Analyst Notes: - CVE Program Container: References: - https://www.asus.com/content/ASUS-Product-Security-Advisory/ - https://www.asus.com/tw/support/callus/ - https://www.twcert.org.tw/tw/cp-132-4567-34350-1.html
CVE ID: CVE-2021-28198 State: PUBLISHED Published: 2021-04-06T05:02:16.854558Z Last Updated: 2024-09-16T19:36:34.788Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H) Vendors: ASUS Products: BMC firmware for ASMB9-iKVM, BMC firmware for RS720A-E9-RS24-E, BMC firmware for RS700A-E9-RS4, BMC firmware for RS700-E9-RS4, BMC firmware for ESC4000 G4X, BMC firmware for RS700-E9-RS12, BMC firmware for RS100-E10-PI2, BMC firmware for RS300-E10-PS4, BMC firmware for RS300-E10-RS4, BMC firmware for RS500A-E9-PS4, BMC firmware for RS500A-E9-RS4, BMC firmware for RS500A-E9 RS4, BMC firmware for E700 G4, BMC firmware for WS C422 PRO/SE, BMC firmware for WS X299 PRO/SE, BMC firmware
irmware for RS500-E9-RS4-U, BMC firmware for RS520-E9-RS12-E, BMC firmware for RS520-E9-RS8, BMC firmware for ESC8000 G4, BMC firmware for ESC8000 G4/10G, BMC firmware for RS720-E9-RS12-E, BMC firmware for WS C621E SAGE, BMC firmware for RS500A-E10-PS4, BMC firmware for RS500A-E10-RS4, BMC firmware for RS700A-E9-RS12V2, BMC firmware for RS700A-E9-RS4V2, BMC firmware for RS720A-E9-RS12V2, BMC firmware for RS720A-E9-RS24V2, BMC firmware for Z11PR-D16 Problem Types: CWE-120 Description: The Firmware protocol configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileg
s not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service. Additional Analyst Notes: - CVE Program Container: References: - https://www.asus.com/content/ASUS-Product-Security-Advisory/ - https://www.asus.com/tw/support/callus/ - https://www.twcert.org.tw/tw/cp-132-4568-627f7-1.html
CVE ID: CVE-2021-28199 State: PUBLISHED Published: 2021-04-06T05:02:17.611246Z Last Updated: 2024-09-16T16:48:36.806Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H) Vendors: ASUS Products: BMC firmware for ASMB9-iKVM, BMC firmware for RS720A-E9-RS24-E, BMC firmware for RS700A-E9-RS4, BMC firmware for RS700-E9-RS4, BMC firmware for ESC4000 G4X, BMC firmware for RS700-E9-RS12, BMC firmware for RS100-E10-PI2, BMC firmware for RS300-E10-PS4, BMC firmware for RS300-E10-RS4, BMC firmware for RS500A-E9-PS4, BMC firmware for RS500A-E9-RS4, BMC firmware for RS500A-E9 RS4, BMC firmware for E700 G4, BMC firmware for WS C422 PRO/SE, BMC firmware for WS X299 PRO/SE, BMC firmware
irmware for RS500-E9-RS4-U, BMC firmware for RS520-E9-RS12-E, BMC firmware for RS520-E9-RS8, BMC firmware for ESC8000 G4, BMC firmware for ESC8000 G4/10G, BMC firmware for RS720-E9-RS12-E, BMC firmware for WS C621E SAGE, BMC firmware for RS500A-E10-PS4, BMC firmware for RS500A-E10-RS4, BMC firmware for RS700A-E9-RS12V2, BMC firmware for RS700A-E9-RS4V2, BMC firmware for RS720A-E9-RS12V2, BMC firmware for RS720A-E9-RS24V2, BMC firmware for Z11PR-D16 Problem Types: CWE-120 Description: The specific function in ASUS BMC’s firmware Web management page (Modify user’s information function) does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtainin
function) does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service. Additional Analyst Notes: - CVE Program Container: References: - https://www.asus.com/content/ASUS-Product-Security-Advisory/ - https://www.asus.com/tw/support/callus/ - https://www.twcert.org.tw/tw/cp-132-4569-6b391-1.html
CVE ID: CVE-2021-28200 State: PUBLISHED Published: 2021-04-06T05:02:18.362839Z Last Updated: 2024-09-16T16:48:30.923Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H) Vendors: ASUS Products: BMC firmware for ASMB9-iKVM, BMC firmware for RS720A-E9-RS24-E, BMC firmware for RS700A-E9-RS4, BMC firmware for RS700-E9-RS4, BMC firmware for ESC4000 G4X, BMC firmware for RS700-E9-RS12, BMC firmware for RS100-E10-PI2, BMC firmware for RS300-E10-PS4, BMC firmware for RS300-E10-RS4, BMC firmware for RS500A-E9-PS4, BMC firmware for RS500A-E9-RS4, BMC firmware for RS500A-E9 RS4, BMC firmware for E700 G4, BMC firmware for WS C422 PRO/SE, BMC firmware for WS X299 PRO/SE, BMC firmware
irmware for RS500-E9-RS4-U, BMC firmware for RS520-E9-RS12-E, BMC firmware for RS520-E9-RS8, BMC firmware for ESC8000 G4, BMC firmware for ESC8000 G4/10G, BMC firmware for RS720-E9-RS12-E, BMC firmware for WS C621E SAGE, BMC firmware for RS500A-E10-PS4, BMC firmware for RS500A-E10-RS4, BMC firmware for RS700A-E9-RS12V2, BMC firmware for RS700A-E9-RS4V2, BMC firmware for RS720A-E9-RS12V2, BMC firmware for RS720A-E9-RS24V2, BMC firmware for Z11PR-D16 Problem Types: CWE-120 Description: The CD media configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permis
ify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service. Additional Analyst Notes: - CVE Program Container: References: - https://www.asus.com/content/ASUS-Product-Security-Advisory/ - https://www.asus.com/tw/support/callus/ - https://www.twcert.org.tw/tw/cp-132-4570-4d216-1.html
CVE ID: CVE-2021-28201 State: PUBLISHED Published: 2021-04-06T05:02:19.279337Z Last Updated: 2024-09-17T01:31:19.486Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H) Vendors: ASUS Products: BMC firmware for ASMB9-iKVM, BMC firmware for RS720A-E9-RS24-E, BMC firmware for RS700A-E9-RS4, BMC firmware for RS700-E9-RS4, BMC firmware for ESC4000 G4X, BMC firmware for RS700-E9-RS12, BMC firmware for RS100-E10-PI2, BMC firmware for RS300-E10-PS4, BMC firmware for RS300-E10-RS4, BMC firmware for RS500A-E9-PS4, BMC firmware for RS500A-E9-RS4, BMC firmware for RS500A-E9 RS4, BMC firmware for E700 G4, BMC firmware for WS C422 PRO/SE, BMC firmware for WS X299 PRO/SE, BMC firmware
irmware for RS500-E9-RS4-U, BMC firmware for RS520-E9-RS12-E, BMC firmware for RS520-E9-RS8, BMC firmware for ESC8000 G4, BMC firmware for ESC8000 G4/10G, BMC firmware for RS720-E9-RS12-E, BMC firmware for WS C621E SAGE, BMC firmware for RS500A-E10-PS4, BMC firmware for RS500A-E10-RS4, BMC firmware for RS700A-E9-RS12V2, BMC firmware for RS700A-E9-RS4V2, BMC firmware for RS720A-E9-RS12V2, BMC firmware for RS720A-E9-RS24V2, BMC firmware for Z11PR-D16 Problem Types: CWE-120 Description: The Service configuration-1 function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permi
rify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service. Additional Analyst Notes: - CVE Program Container: References: - https://www.asus.com/content/ASUS-Product-Security-Advisory/ - https://www.asus.com/tw/support/callus/ - https://www.twcert.org.tw/tw/cp-132-4571-d454c-1.html
CVE ID: CVE-2021-28202 State: PUBLISHED Published: 2021-04-06T05:02:20.160097Z Last Updated: 2024-09-17T02:12:15.278Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H) Vendors: ASUS Products: BMC firmware for ASMB9-iKVM, BMC firmware for RS720A-E9-RS24-E, BMC firmware for RS700A-E9-RS4, BMC firmware for RS700-E9-RS4, BMC firmware for ESC4000 G4X, BMC firmware for RS700-E9-RS12, BMC firmware for RS100-E10-PI2, BMC firmware for RS300-E10-PS4, BMC firmware for RS300-E10-RS4, BMC firmware for RS500A-E9-PS4, BMC firmware for RS500A-E9-RS4, BMC firmware for RS500A-E9 RS4, BMC firmware for E700 G4, BMC firmware for WS C422 PRO/SE, BMC firmware for WS X299 PRO/SE, BMC firmware