rainbutterfly/cve_corpus huggingface dataset:
CVE-2021-28196 ASUS BMC's firmware: buffer overflow - Generate SSL certificate function
The specific function in ASUS BMC’s firmware Web management page (Generate SSL certificate function) does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.
Problem types: cwe_id: CWE-120
description: CWE-120 Buffer Overflow
Affected products: vendor: ASUS
product: BMC firmware for ASMB9-iKVM
vendor: ASUS
product: BMC firmware for RS720A-E9-RS24-E
vendor: ASUS
product: BMC firmware for RS700A-E9-RS4
vendor: ASUS
product: BMC firmware for RS700-E9-RS4
vendor: ASUS
product: BMC firmware for ESC4000 G4X
vendor: ASUS
product: BMC firmware for RS700-E9-RS12
vendor: ASUS
product: BMC firmware for RS100-E10-PI2
vendor: ASUS
product: BMC firmware for RS300-E10-PS4
vendor: ASUS
product: BMC firmware for RS300-E10-RS4
vendor: ASUS
product: BMC firmware for RS500A-E9-PS4
vendor: ASUS
product: BMC firmware for RS500A-E9-RS4
vendor: ASUS
product: BMC firmware for RS500A-E9 RS4
vendor: ASUS
product: BMC firmware for E700 G4
vendor: ASUS
product: BMC firmware for WS C422 PRO/SE
vendor: ASUS
product: BMC firmware for WS X299 PRO/SE
vendor: ASUS
product: BMC firmware for Z11PA-U12
vendor: ASUS
product: BMC firmware for Z11PA-U12/10G-2S
vendor: ASUS
product: BMC firmware for KNPA-U16
vendor: ASUS
product: BMC firmware for ESC4000 DHD G4
vendor: ASUS
product: BMC firmware for ESC4000 G4
vendor: ASUS
product: BMC firmware for RS720Q-E9-RS24-S
vendor: ASUS
product: BMC firmware for RS720Q-E9-RS8
vendor: ASUS
product: BMC firmware for RS720Q-E9-RS8-S
vendor: ASUS
product: BMC firmware for Z11PA-D8
vendor: ASUS
product: BMC firmware for Z11PA-D8C
vendor: ASUS
product: BMC firmware for RS720-E9-RS24-U
vendor: ASUS
product: BMC firmware for RS720-E9-RS8-G
vendor: ASUS
product: BMC firmware for RS500-E9-PS4
vendor: ASUS
product: BMC firmware for Pro E800 G4
vendor: ASUS
product: BMC firmware for RS500-E9-RS4
vendor: ASUS
product: BMC firmware for RS500-E9-RS4-U
vendor: ASUS
product: BMC firmware for RS520-E9-RS12-E
vendor: ASUS
product: BMC firmware for RS520-E9-RS8
vendor: ASUS
product: BMC firmware for ESC8000 G4
vendor: ASUS
product: BMC firmware for ESC8000 G4/10G
vendor: ASUS
product: BMC firmware for RS720-E9-RS12-E
vendor: ASUS
product: BMC firmware for WS C621E SAGE
vendor: ASUS
product: BMC firmware for RS500A-E10-PS4
vendor: ASUS
product: BMC firmware for RS500A-E10-RS4
vendor: ASUS
product: BMC firmware for RS700A-E9-RS12V2
vendor: ASUS
product: BMC firmware for RS700A-E9-RS4V2
vendor: ASUS
product: BMC firmware for RS720A-E9-RS12V2
vendor: ASUS
product: BMC firmware for RS720A-E9-RS24V2
vendor: ASUS
product: BMC firmware for Z11PR-D16
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 4.9
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: HIGH
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
version: 3.1
Published: 2021-04-06T05:02:15.183Z
CVE-2021-28197 ASUS BMC's firmware: buffer overflow - Active Directory configuration function
The Active Directory configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.
Problem types: cwe_id: CWE-120
description: CWE-120 Buffer Overflow
Affected products: vendor: ASUS
product: BMC firmware for ASMB9-iKVM
vendor: ASUS
product: BMC firmware for RS720A-E9-RS24-E
vendor: ASUS
product: BMC firmware for RS700A-E9-RS4
vendor: ASUS
product: BMC firmware for RS700-E9-RS4
vendor: ASUS
product: BMC firmware for ESC4000 G4X
vendor: ASUS
product: BMC firmware for RS700-E9-RS12
vendor: ASUS
product: BMC firmware for RS100-E10-PI2
vendor: ASUS
product: BMC firmware for RS300-E10-PS4
vendor: ASUS
product: BMC firmware for RS300-E10-RS4
vendor: ASUS
product: BMC firmware for RS500A-E9-PS4
vendor: ASUS
product: BMC firmware for RS500A-E9-RS4
vendor: ASUS
product: BMC firmware for RS500A-E9 RS4
vendor: ASUS
product: BMC firmware for E700 G4
vendor: ASUS
product: BMC firmware for WS C422 PRO/SE
vendor: ASUS
product: BMC firmware for WS X299 PRO/SE
vendor: ASUS
product: BMC firmware for Z11PA-U12
vendor: ASUS
product: BMC firmware for Z11PA-U12/10G-2S
vendor: ASUS
product: BMC firmware for KNPA-U16
vendor: ASUS
product: BMC firmware for ESC4000 DHD G4
vendor: ASUS
product: BMC firmware for ESC4000 G4
vendor: ASUS
product: BMC firmware for RS720Q-E9-RS24-S
vendor: ASUS
product: BMC firmware for RS720Q-E9-RS8
vendor: ASUS
product: BMC firmware for RS720Q-E9-RS8-S
vendor: ASUS
product: BMC firmware for Z11PA-D8
vendor: ASUS
product: BMC firmware for Z11PA-D8C
vendor: ASUS
product: BMC firmware for RS720-E9-RS24-U
vendor: ASUS
product: BMC firmware for RS720-E9-RS8-G
vendor: ASUS
product: BMC firmware for RS500-E9-PS4
vendor: ASUS
product: BMC firmware for Pro E800 G4
vendor: ASUS
product: BMC firmware for RS500-E9-RS4
vendor: ASUS
product: BMC firmware for RS500-E9-RS4-U
vendor: ASUS
product: BMC firmware for RS520-E9-RS12-E
vendor: ASUS
product: BMC firmware for RS520-E9-RS8
vendor: ASUS
product: BMC firmware for ESC8000 G4
vendor: ASUS
product: BMC firmware for ESC8000 G4/10G
vendor: ASUS
product: BMC firmware for RS720-E9-RS12-E
vendor: ASUS
product: BMC firmware for WS C621E SAGE
vendor: ASUS
product: BMC firmware for RS500A-E10-PS4
vendor: ASUS
product: BMC firmware for RS500A-E10-RS4
vendor: ASUS
product: BMC firmware for RS700A-E9-RS12V2
vendor: ASUS
product: BMC firmware for RS700A-E9-RS4V2
vendor: ASUS
product: BMC firmware for RS720A-E9-RS12V2
vendor: ASUS
product: BMC firmware for RS720A-E9-RS24V2
vendor: ASUS
product: BMC firmware for Z11PR-D16
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 4.9
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: HIGH
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
version: 3.1
Published: 2021-04-06T05:02:16.045Z
CVE-2021-28198 ASUS BMC's firmware: buffer overflow - Firmware protocol configuration
The Firmware protocol configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.
Problem types: cwe_id: CWE-120
description: CWE-120 Buffer Overflow
Affected products: vendor: ASUS
product: BMC firmware for ASMB9-iKVM
vendor: ASUS
product: BMC firmware for RS720A-E9-RS24-E
vendor: ASUS
product: BMC firmware for RS700A-E9-RS4
vendor: ASUS
product: BMC firmware for RS700-E9-RS4
vendor: ASUS
product: BMC firmware for ESC4000 G4X
vendor: ASUS
product: BMC firmware for RS700-E9-RS12
vendor: ASUS
product: BMC firmware for RS100-E10-PI2
vendor: ASUS
product: BMC firmware for RS300-E10-PS4
vendor: ASUS
product: BMC firmware for RS300-E10-RS4
vendor: ASUS
product: BMC firmware for RS500A-E9-PS4
vendor: ASUS
product: BMC firmware for RS500A-E9-RS4
vendor: ASUS
product: BMC firmware for RS500A-E9 RS4
vendor: ASUS
product: BMC firmware for E700 G4
vendor: ASUS
product: BMC firmware for WS C422 PRO/SE
vendor: ASUS
product: BMC firmware for WS X299 PRO/SE
vendor: ASUS
product: BMC firmware for Z11PA-U12
vendor: ASUS
product: BMC firmware for Z11PA-U12/10G-2S
vendor: ASUS
product: BMC firmware for KNPA-U16
vendor: ASUS
product: BMC firmware for ESC4000 DHD G4
vendor: ASUS
product: BMC firmware for ESC4000 G4
vendor: ASUS
product: BMC firmware for RS720Q-E9-RS24-S
vendor: ASUS
product: BMC firmware for RS720Q-E9-RS8
vendor: ASUS
product: BMC firmware for RS720Q-E9-RS8-S
vendor: ASUS
product: BMC firmware for Z11PA-D8
vendor: ASUS
product: BMC firmware for Z11PA-D8C
vendor: ASUS
product: BMC firmware for RS720-E9-RS24-U
vendor: ASUS
product: BMC firmware for RS720-E9-RS8-G
vendor: ASUS
product: BMC firmware for RS500-E9-PS4
vendor: ASUS
product: BMC firmware for Pro E800 G4
vendor: ASUS
product: BMC firmware for RS500-E9-RS4
vendor: ASUS
product: BMC firmware for RS500-E9-RS4-U
vendor: ASUS
product: BMC firmware for RS520-E9-RS12-E
vendor: ASUS
product: BMC firmware for RS520-E9-RS8
vendor: ASUS
product: BMC firmware for ESC8000 G4
vendor: ASUS
product: BMC firmware for ESC8000 G4/10G
vendor: ASUS
product: BMC firmware for RS720-E9-RS12-E
vendor: ASUS
product: BMC firmware for WS C621E SAGE
vendor: ASUS
product: BMC firmware for RS500A-E10-PS4
vendor: ASUS
product: BMC firmware for RS500A-E10-RS4
vendor: ASUS
product: BMC firmware for RS700A-E9-RS12V2
vendor: ASUS
product: BMC firmware for RS700A-E9-RS4V2
vendor: ASUS
product: BMC firmware for RS720A-E9-RS12V2
vendor: ASUS
product: BMC firmware for RS720A-E9-RS24V2
vendor: ASUS
product: BMC firmware for Z11PR-D16
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 4.9
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: HIGH
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
version: 3.1
Published: 2021-04-06T05:02:16.854Z
CVE-2021-28199 ASUS BMC's firmware: buffer overflow - Modify user’s information function
The specific function in ASUS BMC’s firmware Web management page (Modify user’s information function) does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.
Problem types: cwe_id: CWE-120
description: CWE-120 Buffer Overflow
Affected products: vendor: ASUS
product: BMC firmware for ASMB9-iKVM
vendor: ASUS
product: BMC firmware for RS720A-E9-RS24-E
vendor: ASUS
product: BMC firmware for RS700A-E9-RS4
vendor: ASUS
product: BMC firmware for RS700-E9-RS4
vendor: ASUS
product: BMC firmware for ESC4000 G4X
vendor: ASUS
product: BMC firmware for RS700-E9-RS12
vendor: ASUS
product: BMC firmware for RS100-E10-PI2
vendor: ASUS
product: BMC firmware for RS300-E10-PS4
vendor: ASUS
product: BMC firmware for RS300-E10-RS4
vendor: ASUS
product: BMC firmware for RS500A-E9-PS4
vendor: ASUS
product: BMC firmware for RS500A-E9-RS4
vendor: ASUS
product: BMC firmware for RS500A-E9 RS4
vendor: ASUS
product: BMC firmware for E700 G4
vendor: ASUS
product: BMC firmware for WS C422 PRO/SE
vendor: ASUS
product: BMC firmware for WS X299 PRO/SE
vendor: ASUS
product: BMC firmware for Z11PA-U12
vendor: ASUS
product: BMC firmware for Z11PA-U12/10G-2S
vendor: ASUS
product: BMC firmware for KNPA-U16
vendor: ASUS
product: BMC firmware for ESC4000 DHD G4
vendor: ASUS
product: BMC firmware for ESC4000 G4
vendor: ASUS
product: BMC firmware for RS720Q-E9-RS24-S
vendor: ASUS
product: BMC firmware for RS720Q-E9-RS8
vendor: ASUS
product: BMC firmware for RS720Q-E9-RS8-S
vendor: ASUS
product: BMC firmware for Z11PA-D8
vendor: ASUS
product: BMC firmware for Z11PA-D8C
vendor: ASUS
product: BMC firmware for RS720-E9-RS24-U
vendor: ASUS
product: BMC firmware for RS720-E9-RS8-G
vendor: ASUS
product: BMC firmware for RS500-E9-PS4
vendor: ASUS
product: BMC firmware for Pro E800 G4
vendor: ASUS
product: BMC firmware for RS500-E9-RS4
vendor: ASUS
product: BMC firmware for RS500-E9-RS4-U
vendor: ASUS
product: BMC firmware for RS520-E9-RS12-E
vendor: ASUS
product: BMC firmware for RS520-E9-RS8
vendor: ASUS
product: BMC firmware for ESC8000 G4
vendor: ASUS
product: BMC firmware for ESC8000 G4/10G
vendor: ASUS
product: BMC firmware for RS720-E9-RS12-E
vendor: ASUS
product: BMC firmware for WS C621E SAGE
vendor: ASUS
product: BMC firmware for RS500A-E10-PS4
vendor: ASUS
product: BMC firmware for RS500A-E10-RS4
vendor: ASUS
product: BMC firmware for RS700A-E9-RS12V2
vendor: ASUS
product: BMC firmware for RS700A-E9-RS4V2
vendor: ASUS
product: BMC firmware for RS720A-E9-RS12V2
vendor: ASUS
product: BMC firmware for RS720A-E9-RS24V2
vendor: ASUS
product: BMC firmware for Z11PR-D16
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 4.9
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: HIGH
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
version: 3.1
Published: 2021-04-06T05:02:17.611Z
CVE-2021-28200 ASUS BMC's firmware: buffer overflow - CD media configuration function
The CD media configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.
Problem types: cwe_id: CWE-120
description: CWE-120 Buffer Overflow
Affected products: vendor: ASUS
product: BMC firmware for ASMB9-iKVM
vendor: ASUS
product: BMC firmware for RS720A-E9-RS24-E
vendor: ASUS
product: BMC firmware for RS700A-E9-RS4
vendor: ASUS
product: BMC firmware for RS700-E9-RS4
vendor: ASUS
product: BMC firmware for ESC4000 G4X
vendor: ASUS
product: BMC firmware for RS700-E9-RS12
vendor: ASUS
product: BMC firmware for RS100-E10-PI2
vendor: ASUS
product: BMC firmware for RS300-E10-PS4
vendor: ASUS
product: BMC firmware for RS300-E10-RS4
vendor: ASUS
product: BMC firmware for RS500A-E9-PS4
vendor: ASUS
product: BMC firmware for RS500A-E9-RS4
vendor: ASUS
product: BMC firmware for RS500A-E9 RS4
vendor: ASUS
product: BMC firmware for E700 G4
vendor: ASUS
product: BMC firmware for WS C422 PRO/SE
vendor: ASUS
product: BMC firmware for WS X299 PRO/SE
vendor: ASUS
product: BMC firmware for Z11PA-U12
vendor: ASUS
product: BMC firmware for Z11PA-U12/10G-2S
vendor: ASUS
product: BMC firmware for KNPA-U16
vendor: ASUS
product: BMC firmware for ESC4000 DHD G4
vendor: ASUS
product: BMC firmware for ESC4000 G4
vendor: ASUS
product: BMC firmware for RS720Q-E9-RS24-S
vendor: ASUS
product: BMC firmware for RS720Q-E9-RS8
vendor: ASUS
product: BMC firmware for RS720Q-E9-RS8-S
vendor: ASUS
product: BMC firmware for Z11PA-D8
vendor: ASUS
product: BMC firmware for Z11PA-D8C
vendor: ASUS
product: BMC firmware for RS720-E9-RS24-U
vendor: ASUS
product: BMC firmware for RS720-E9-RS8-G
vendor: ASUS
product: BMC firmware for RS500-E9-PS4
vendor: ASUS
product: BMC firmware for Pro E800 G4
vendor: ASUS
product: BMC firmware for RS500-E9-RS4
vendor: ASUS
product: BMC firmware for RS500-E9-RS4-U
vendor: ASUS
product: BMC firmware for RS520-E9-RS12-E
vendor: ASUS
product: BMC firmware for RS520-E9-RS8
vendor: ASUS
product: BMC firmware for ESC8000 G4
vendor: ASUS
product: BMC firmware for ESC8000 G4/10G
vendor: ASUS
product: BMC firmware for RS720-E9-RS12-E
vendor: ASUS
product: BMC firmware for WS C621E SAGE
vendor: ASUS
product: BMC firmware for RS500A-E10-PS4
vendor: ASUS
product: BMC firmware for RS500A-E10-RS4
vendor: ASUS
product: BMC firmware for RS700A-E9-RS12V2
vendor: ASUS
product: BMC firmware for RS700A-E9-RS4V2
vendor: ASUS
product: BMC firmware for RS720A-E9-RS12V2
vendor: ASUS
product: BMC firmware for RS720A-E9-RS24V2
vendor: ASUS
product: BMC firmware for Z11PR-D16
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 4.9
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: HIGH
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
version: 3.1
Published: 2021-04-06T05:02:18.362Z
CVE-2021-28201 ASUS BMC's firmware: buffer overflow - Service configuration-1 function
The Service configuration-1 function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.
Problem types: cwe_id: CWE-120
description: CWE-120 Buffer Overflow
Affected products: vendor: ASUS
product: BMC firmware for ASMB9-iKVM
vendor: ASUS
product: BMC firmware for RS720A-E9-RS24-E
vendor: ASUS
product: BMC firmware for RS700A-E9-RS4
vendor: ASUS
product: BMC firmware for RS700-E9-RS4
vendor: ASUS
product: BMC firmware for ESC4000 G4X
vendor: ASUS
product: BMC firmware for RS700-E9-RS12
vendor: ASUS
product: BMC firmware for RS100-E10-PI2
vendor: ASUS
product: BMC firmware for RS300-E10-PS4
vendor: ASUS
product: BMC firmware for RS300-E10-RS4
vendor: ASUS
product: BMC firmware for RS500A-E9-PS4
vendor: ASUS
product: BMC firmware for RS500A-E9-RS4
vendor: ASUS
product: BMC firmware for RS500A-E9 RS4
vendor: ASUS
product: BMC firmware for E700 G4
vendor: ASUS
product: BMC firmware for WS C422 PRO/SE
vendor: ASUS
product: BMC firmware for WS X299 PRO/SE
vendor: ASUS
product: BMC firmware for Z11PA-U12
vendor: ASUS
product: BMC firmware for Z11PA-U12/10G-2S
vendor: ASUS
product: BMC firmware for KNPA-U16
vendor: ASUS
product: BMC firmware for ESC4000 DHD G4
vendor: ASUS
product: BMC firmware for ESC4000 G4
vendor: ASUS
product: BMC firmware for RS720Q-E9-RS24-S
vendor: ASUS
product: BMC firmware for RS720Q-E9-RS8
vendor: ASUS
product: BMC firmware for RS720Q-E9-RS8-S
vendor: ASUS
product: BMC firmware for Z11PA-D8
vendor: ASUS
product: BMC firmware for Z11PA-D8C
vendor: ASUS
product: BMC firmware for RS720-E9-RS24-U
vendor: ASUS
product: BMC firmware for RS720-E9-RS8-G
vendor: ASUS
product: BMC firmware for RS500-E9-PS4
vendor: ASUS
product: BMC firmware for Pro E800 G4
vendor: ASUS
product: BMC firmware for RS500-E9-RS4
vendor: ASUS
product: BMC firmware for RS500-E9-RS4-U
vendor: ASUS
product: BMC firmware for RS520-E9-RS12-E
vendor: ASUS
product: BMC firmware for RS520-E9-RS8
vendor: ASUS
product: BMC firmware for ESC8000 G4
vendor: ASUS
product: BMC firmware for ESC8000 G4/10G
vendor: ASUS
product: BMC firmware for RS720-E9-RS12-E
vendor: ASUS
product: BMC firmware for WS C621E SAGE
vendor: ASUS
product: BMC firmware for RS500A-E10-PS4
vendor: ASUS
product: BMC firmware for RS500A-E10-RS4
vendor: ASUS
product: BMC firmware for RS700A-E9-RS12V2
vendor: ASUS
product: BMC firmware for RS700A-E9-RS4V2
vendor: ASUS
product: BMC firmware for RS720A-E9-RS12V2
vendor: ASUS
product: BMC firmware for RS720A-E9-RS24V2
vendor: ASUS
product: BMC firmware for Z11PR-D16
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 4.9
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: HIGH
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
version: 3.1
Published: 2021-04-06T05:02:19.279Z
CVE-2021-28202 ASUS BMC's firmware: buffer overflow - Service configuration-2 function
The Service configuration-2 function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.
Problem types: cwe_id: CWE-120
description: CWE-120 Buffer Overflow
Affected products: vendor: ASUS
product: BMC firmware for ASMB9-iKVM
vendor: ASUS
product: BMC firmware for RS720A-E9-RS24-E
vendor: ASUS
product: BMC firmware for RS700A-E9-RS4
vendor: ASUS
product: BMC firmware for RS700-E9-RS4
vendor: ASUS
product: BMC firmware for ESC4000 G4X
vendor: ASUS
product: BMC firmware for RS700-E9-RS12
vendor: ASUS
product: BMC firmware for RS100-E10-PI2
vendor: ASUS
product: BMC firmware for RS300-E10-PS4
vendor: ASUS
product: BMC firmware for RS300-E10-RS4
vendor: ASUS
product: BMC firmware for RS500A-E9-PS4
vendor: ASUS
product: BMC firmware for RS500A-E9-RS4
vendor: ASUS
product: BMC firmware for RS500A-E9 RS4
vendor: ASUS
product: BMC firmware for E700 G4
vendor: ASUS
product: BMC firmware for WS C422 PRO/SE
vendor: ASUS
product: BMC firmware for WS X299 PRO/SE
vendor: ASUS
product: BMC firmware for Z11PA-U12
vendor: ASUS
product: BMC firmware for Z11PA-U12/10G-2S
vendor: ASUS
product: BMC firmware for KNPA-U16
vendor: ASUS
product: BMC firmware for ESC4000 DHD G4
vendor: ASUS
product: BMC firmware for ESC4000 G4
vendor: ASUS
product: BMC firmware for RS720Q-E9-RS24-S
vendor: ASUS
product: BMC firmware for RS720Q-E9-RS8
vendor: ASUS
product: BMC firmware for RS720Q-E9-RS8-S
vendor: ASUS
product: BMC firmware for Z11PA-D8
vendor: ASUS
product: BMC firmware for Z11PA-D8C
vendor: ASUS
product: BMC firmware for RS720-E9-RS24-U
vendor: ASUS
product: BMC firmware for RS720-E9-RS8-G
vendor: ASUS
product: BMC firmware for RS500-E9-PS4
vendor: ASUS
product: BMC firmware for Pro E800 G4
vendor: ASUS
product: BMC firmware for RS500-E9-RS4
vendor: ASUS
product: BMC firmware for RS500-E9-RS4-U
vendor: ASUS
product: BMC firmware for RS520-E9-RS12-E
vendor: ASUS
product: BMC firmware for RS520-E9-RS8
vendor: ASUS
product: BMC firmware for ESC8000 G4
vendor: ASUS
product: BMC firmware for ESC8000 G4/10G
vendor: ASUS
product: BMC firmware for RS720-E9-RS12-E
vendor: ASUS
product: BMC firmware for WS C621E SAGE
vendor: ASUS
product: BMC firmware for RS500A-E10-PS4
vendor: ASUS
product: BMC firmware for RS500A-E10-RS4
vendor: ASUS
product: BMC firmware for RS700A-E9-RS12V2
vendor: ASUS
product: BMC firmware for RS700A-E9-RS4V2
vendor: ASUS
product: BMC firmware for RS720A-E9-RS12V2
vendor: ASUS
product: BMC firmware for RS720A-E9-RS24V2
vendor: ASUS
product: BMC firmware for Z11PR-D16
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 4.9
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: HIGH
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
version: 3.1
Published: 2021-04-06T05:02:20.160Z
CVE-2021-28203 ASUS BMC's firmware: command injection - Web Set Media Image function
The Web Set Media Image function in ASUS BMC’s firmware Web management page does not filter the specific parameter. As obtaining the administrator permission, remote attackers can launch command injection to execute command arbitrary.
Problem types: cwe_id: CWE-78
description: CWE-78 OS Command Injection
Affected products: vendor: ASUS
product: BMC firmware for Z10PR-D16
vendor: ASUS
product: BMC firmware for ASMB8-iKVM
vendor: ASUS
product: BMC firmware for Z10PE-D16 WS
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 7.2
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: HIGH
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
version: 3.1
Published: 2021-04-06T05:02:20.959Z
CVE-2021-28204 ASUS BMC's firmware: command injection - Modify user’s information function
The specific function in ASUS BMC’s firmware Web management page (Modify user’s information function) does not filter the specific parameter. As obtaining the administrator permission, remote attackers can launch command injection to execute command arbitrary.
Problem types: cwe_id: CWE-78
description: CWE-78 OS Command Injection
Affected products: vendor: ASUS
product: BMC firmware for Z10PR-D16
vendor: ASUS
product: BMC firmware for ASMB8-iKVM
vendor: ASUS
product: BMC firmware for Z10PE-D16 WS
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 7.2
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: HIGH
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
version: 3.1
Published: 2021-04-06T05:02:21.835Z