rainbutterfly/cve_corpus huggingface dataset:
CVE-2021-28186 ASUS BMC's firmware: buffer overflow - ActiveX configuration-2 acquisition
The specific function in ASUS BMC’s firmware Web management page (ActiveX configuration-2 acquisition) does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.
Problem types: cwe_id: CWE-120
description: CWE-120 Buffer Overflow
Affected products: vendor: ASUS
product: BMC firmware for Z10PR-D16
vendor: ASUS
product: BMC firmware for ASMB8-iKVM
vendor: ASUS
product: BMC firmware for Z10PE-D16 WS
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 4.9
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: HIGH
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
version: 3.1
Published: 2021-04-06T05:02:07.331Z
CVE-2021-28187 ASUS BMC's firmware: buffer overflow - Generate new SSL certificate
The specific function in ASUS BMC’s firmware Web management page (Generate new SSL certificate) does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.
Problem types: cwe_id: CWE-120
description: CWE-120 Buffer Overflow
Affected products: vendor: ASUS
product: BMC firmware for Z10PR-D16
vendor: ASUS
product: BMC firmware for ASMB8-iKVM
vendor: ASUS
product: BMC firmware for Z10PE-D16 WS
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 4.9
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: HIGH
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
version: 3.1
Published: 2021-04-06T05:02:08.095Z
CVE-2021-28188 ASUS BMC's firmware: buffer overflow - Modify user’s information function
The specific function in ASUS BMC’s firmware Web management page (Modify user’s information function) does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.
Problem types: cwe_id: CWE-120
description: CWE-120 Buffer Overflow
Affected products: vendor: ASUS
product: BMC firmware for Z10PR-D16
vendor: ASUS
product: BMC firmware for ASMB8-iKVM
vendor: ASUS
product: BMC firmware for Z10PE-D16 WS
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 4.9
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: HIGH
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
version: 3.1
Published: 2021-04-06T05:02:08.812Z
CVE-2021-28189 ASUS BMC's firmware: buffer overflow - SMTP configuration function
The SMTP configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.
Problem types: cwe_id: CWE-120
description: CWE-120 Buffer Overflow
Affected products: vendor: ASUS
product: BMC firmware for Z10PR-D16
vendor: ASUS
product: BMC firmware for ASMB8-iKVM
vendor: ASUS
product: BMC firmware for Z10PE-D16 WS
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 4.9
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: HIGH
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
version: 3.1
Published: 2021-04-06T05:02:09.503Z
CVE-2021-28190 ASUS BMC's firmware: buffer overflow - Generate new certificate function
The specific function in ASUS BMC’s firmware Web management page (Generate new certificate function) does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.
Problem types: cwe_id: CWE-120
description: CWE-120 Buffer Overflow
Affected products: vendor: ASUS
product: BMC firmware for ASMB9-iKVM
vendor: ASUS
product: BMC firmware for RS720A-E9-RS24-E
vendor: ASUS
product: BMC firmware for RS700A-E9-RS4
vendor: ASUS
product: BMC firmware for RS700-E9-RS4
vendor: ASUS
product: BMC firmware for ESC4000 G4X
vendor: ASUS
product: BMC firmware for RS700-E9-RS12
vendor: ASUS
product: BMC firmware for RS100-E10-PI2
vendor: ASUS
product: BMC firmware for RS300-E10-PS4
vendor: ASUS
product: BMC firmware for RS300-E10-RS4
vendor: ASUS
product: BMC firmware for RS500A-E9-PS4
vendor: ASUS
product: BMC firmware for RS500A-E9-RS4
vendor: ASUS
product: BMC firmware for RS500A-E9 RS4
vendor: ASUS
product: BMC firmware for E700 G4
vendor: ASUS
product: BMC firmware for WS C422 PRO/SE
vendor: ASUS
product: BMC firmware for WS X299 PRO/SE
vendor: ASUS
product: BMC firmware for Z11PA-U12
vendor: ASUS
product: BMC firmware for Z11PA-U12/10G-2S
vendor: ASUS
product: BMC firmware for KNPA-U16
vendor: ASUS
product: BMC firmware for ESC4000 DHD G4
vendor: ASUS
product: BMC firmware for ESC4000 G4
vendor: ASUS
product: BMC firmware for RS720Q-E9-RS24-S
vendor: ASUS
product: BMC firmware for RS720Q-E9-RS8
vendor: ASUS
product: BMC firmware for RS720Q-E9-RS8-S
vendor: ASUS
product: BMC firmware for Z11PA-D8
vendor: ASUS
product: BMC firmware for Z11PA-D8C
vendor: ASUS
product: BMC firmware for RS720-E9-RS24-U
vendor: ASUS
product: BMC firmware for RS720-E9-RS8-G
vendor: ASUS
product: BMC firmware for RS500-E9-PS4
vendor: ASUS
product: BMC firmware for Pro E800 G4
vendor: ASUS
product: BMC firmware for RS500-E9-RS4
vendor: ASUS
product: BMC firmware for RS500-E9-RS4-U
vendor: ASUS
product: BMC firmware for RS520-E9-RS12-E
vendor: ASUS
product: BMC firmware for RS520-E9-RS8
vendor: ASUS
product: BMC firmware for ESC8000 G4
vendor: ASUS
product: BMC firmware for ESC8000 G4/10G
vendor: ASUS
product: BMC firmware for RS720-E9-RS12-E
vendor: ASUS
product: BMC firmware for WS C621E SAGE
vendor: ASUS
product: BMC firmware for RS500A-E10-PS4
vendor: ASUS
product: BMC firmware for RS500A-E10-RS4
vendor: ASUS
product: BMC firmware for RS700A-E9-RS12V2
vendor: ASUS
product: BMC firmware for RS700A-E9-RS4V2
vendor: ASUS
product: BMC firmware for RS720A-E9-RS12V2
vendor: ASUS
product: BMC firmware for RS720A-E9-RS24V2
vendor: ASUS
product: BMC firmware for Z11PR-D16
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 4.9
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: HIGH
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
version: 3.1
Published: 2021-04-06T05:02:10.261Z
CVE-2021-28191 ASUS BMC's firmware: buffer overflow - Firmware update function
The Firmware update function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.
Problem types: cwe_id: CWE-120
description: CWE-120 Buffer Overflow
Affected products: vendor: ASUS
product: BMC firmware for ASMB9-iKVM
vendor: ASUS
product: BMC firmware for RS720A-E9-RS24-E
vendor: ASUS
product: BMC firmware for RS700A-E9-RS4
vendor: ASUS
product: BMC firmware for RS700-E9-RS4
vendor: ASUS
product: BMC firmware for ESC4000 G4X
vendor: ASUS
product: BMC firmware for RS700-E9-RS12
vendor: ASUS
product: BMC firmware for RS100-E10-PI2
vendor: ASUS
product: BMC firmware for RS300-E10-PS4
vendor: ASUS
product: BMC firmware for RS300-E10-RS4
vendor: ASUS
product: BMC firmware for RS500A-E9-PS4
vendor: ASUS
product: BMC firmware for RS500A-E9-RS4
vendor: ASUS
product: BMC firmware for RS500A-E9 RS4
vendor: ASUS
product: BMC firmware for E700 G4
vendor: ASUS
product: BMC firmware for WS C422 PRO/SE
vendor: ASUS
product: BMC firmware for WS X299 PRO/SE
vendor: ASUS
product: BMC firmware for Z11PA-U12
vendor: ASUS
product: BMC firmware for Z11PA-U12/10G-2S
vendor: ASUS
product: BMC firmware for KNPA-U16
vendor: ASUS
product: BMC firmware for ESC4000 DHD G4
vendor: ASUS
product: BMC firmware for ESC4000 G4
vendor: ASUS
product: BMC firmware for RS720Q-E9-RS24-S
vendor: ASUS
product: BMC firmware for RS720Q-E9-RS8
vendor: ASUS
product: BMC firmware for RS720Q-E9-RS8-S
vendor: ASUS
product: BMC firmware for Z11PA-D8
vendor: ASUS
product: BMC firmware for Z11PA-D8C
vendor: ASUS
product: BMC firmware for RS720-E9-RS24-U
vendor: ASUS
product: BMC firmware for RS720-E9-RS8-G
vendor: ASUS
product: BMC firmware for RS500-E9-PS4
vendor: ASUS
product: BMC firmware for Pro E800 G4
vendor: ASUS
product: BMC firmware for RS500-E9-RS4
vendor: ASUS
product: BMC firmware for RS500-E9-RS4-U
vendor: ASUS
product: BMC firmware for RS520-E9-RS12-E
vendor: ASUS
product: BMC firmware for RS520-E9-RS8
vendor: ASUS
product: BMC firmware for ESC8000 G4
vendor: ASUS
product: BMC firmware for ESC8000 G4/10G
vendor: ASUS
product: BMC firmware for RS720-E9-RS12-E
vendor: ASUS
product: BMC firmware for WS C621E SAGE
vendor: ASUS
product: BMC firmware for RS500A-E10-PS4
vendor: ASUS
product: BMC firmware for RS500A-E10-RS4
vendor: ASUS
product: BMC firmware for RS700A-E9-RS12V2
vendor: ASUS
product: BMC firmware for RS700A-E9-RS4V2
vendor: ASUS
product: BMC firmware for RS720A-E9-RS12V2
vendor: ASUS
product: BMC firmware for RS720A-E9-RS24V2
vendor: ASUS
product: BMC firmware for Z11PR-D16
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 4.9
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: HIGH
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
version: 3.1
Published: 2021-04-06T05:02:11.043Z
CVE-2021-28192 ASUS BMC's firmware: buffer overflow - Remote video storage function
The specific function in ASUS BMC’s firmware Web management page (Remote video storage function) does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.
Problem types: cwe_id: CWE-120
description: CWE-120 Buffer Overflow
Affected products: vendor: ASUS
product: BMC firmware for ASMB9-iKVM
vendor: ASUS
product: BMC firmware for RS720A-E9-RS24-E
vendor: ASUS
product: BMC firmware for RS700A-E9-RS4
vendor: ASUS
product: BMC firmware for RS700-E9-RS4
vendor: ASUS
product: BMC firmware for ESC4000 G4X
vendor: ASUS
product: BMC firmware for RS700-E9-RS12
vendor: ASUS
product: BMC firmware for RS100-E10-PI2
vendor: ASUS
product: BMC firmware for RS300-E10-PS4
vendor: ASUS
product: BMC firmware for RS300-E10-RS4
vendor: ASUS
product: BMC firmware for RS500A-E9-PS4
vendor: ASUS
product: BMC firmware for RS500A-E9-RS4
vendor: ASUS
product: BMC firmware for RS500A-E9 RS4
vendor: ASUS
product: BMC firmware for E700 G4
vendor: ASUS
product: BMC firmware for WS C422 PRO/SE
vendor: ASUS
product: BMC firmware for WS X299 PRO/SE
vendor: ASUS
product: BMC firmware for Z11PA-U12
vendor: ASUS
product: BMC firmware for Z11PA-U12/10G-2S
vendor: ASUS
product: BMC firmware for KNPA-U16
vendor: ASUS
product: BMC firmware for ESC4000 DHD G4
vendor: ASUS
product: BMC firmware for ESC4000 G4
vendor: ASUS
product: BMC firmware for RS720Q-E9-RS24-S
vendor: ASUS
product: BMC firmware for RS720Q-E9-RS8
vendor: ASUS
product: BMC firmware for RS720Q-E9-RS8-S
vendor: ASUS
product: BMC firmware for Z11PA-D8
vendor: ASUS
product: BMC firmware for Z11PA-D8C
vendor: ASUS
product: BMC firmware for RS720-E9-RS24-U
vendor: ASUS
product: BMC firmware for RS720-E9-RS8-G
vendor: ASUS
product: BMC firmware for RS500-E9-PS4
vendor: ASUS
product: BMC firmware for Pro E800 G4
vendor: ASUS
product: BMC firmware for RS500-E9-RS4
vendor: ASUS
product: BMC firmware for RS500-E9-RS4-U
vendor: ASUS
product: BMC firmware for RS520-E9-RS12-E
vendor: ASUS
product: BMC firmware for RS520-E9-RS8
vendor: ASUS
product: BMC firmware for ESC8000 G4
vendor: ASUS
product: BMC firmware for ESC8000 G4/10G
vendor: ASUS
product: BMC firmware for RS720-E9-RS12-E
vendor: ASUS
product: BMC firmware for WS C621E SAGE
vendor: ASUS
product: BMC firmware for RS500A-E10-PS4
vendor: ASUS
product: BMC firmware for RS500A-E10-RS4
vendor: ASUS
product: BMC firmware for RS700A-E9-RS12V2
vendor: ASUS
product: BMC firmware for RS700A-E9-RS4V2
vendor: ASUS
product: BMC firmware for RS720A-E9-RS12V2
vendor: ASUS
product: BMC firmware for RS720A-E9-RS24V2
vendor: ASUS
product: BMC firmware for Z11PR-D16
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 4.9
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: HIGH
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
version: 3.1
Published: 2021-04-06T05:02:11.814Z
CVE-2021-28193 ASUS BMC's firmware: buffer overflow - SMTP configuration function
The SMTP configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.
Problem types: cwe_id: CWE-120
description: CWE-120 Buffer Overflow
Affected products: vendor: ASUS
product: BMC firmware for ASMB9-iKVM
vendor: ASUS
product: BMC firmware for RS720A-E9-RS24-E
vendor: ASUS
product: BMC firmware for RS700A-E9-RS4
vendor: ASUS
product: BMC firmware for RS700-E9-RS4
vendor: ASUS
product: BMC firmware for ESC4000 G4X
vendor: ASUS
product: BMC firmware for RS700-E9-RS12
vendor: ASUS
product: BMC firmware for RS100-E10-PI2
vendor: ASUS
product: BMC firmware for RS300-E10-PS4
vendor: ASUS
product: BMC firmware for RS300-E10-RS4
vendor: ASUS
product: BMC firmware for RS500A-E9-PS4
vendor: ASUS
product: BMC firmware for RS500A-E9-RS4
vendor: ASUS
product: BMC firmware for RS500A-E9 RS4
vendor: ASUS
product: BMC firmware for E700 G4
vendor: ASUS
product: BMC firmware for WS C422 PRO/SE
vendor: ASUS
product: BMC firmware for WS X299 PRO/SE
vendor: ASUS
product: BMC firmware for Z11PA-U12
vendor: ASUS
product: BMC firmware for Z11PA-U12/10G-2S
vendor: ASUS
product: BMC firmware for KNPA-U16
vendor: ASUS
product: BMC firmware for ESC4000 DHD G4
vendor: ASUS
product: BMC firmware for ESC4000 G4
vendor: ASUS
product: BMC firmware for RS720Q-E9-RS24-S
vendor: ASUS
product: BMC firmware for RS720Q-E9-RS8
vendor: ASUS
product: BMC firmware for RS720Q-E9-RS8-S
vendor: ASUS
product: BMC firmware for Z11PA-D8
vendor: ASUS
product: BMC firmware for Z11PA-D8C
vendor: ASUS
product: BMC firmware for RS720-E9-RS24-U
vendor: ASUS
product: BMC firmware for RS720-E9-RS8-G
vendor: ASUS
product: BMC firmware for RS500-E9-PS4
vendor: ASUS
product: BMC firmware for Pro E800 G4
vendor: ASUS
product: BMC firmware for RS500-E9-RS4
vendor: ASUS
product: BMC firmware for RS500-E9-RS4-U
vendor: ASUS
product: BMC firmware for RS520-E9-RS12-E
vendor: ASUS
product: BMC firmware for RS520-E9-RS8
vendor: ASUS
product: BMC firmware for ESC8000 G4
vendor: ASUS
product: BMC firmware for ESC8000 G4/10G
vendor: ASUS
product: BMC firmware for RS720-E9-RS12-E
vendor: ASUS
product: BMC firmware for WS C621E SAGE
vendor: ASUS
product: BMC firmware for RS500A-E10-PS4
vendor: ASUS
product: BMC firmware for RS500A-E10-RS4
vendor: ASUS
product: BMC firmware for RS700A-E9-RS12V2
vendor: ASUS
product: BMC firmware for RS700A-E9-RS4V2
vendor: ASUS
product: BMC firmware for RS720A-E9-RS12V2
vendor: ASUS
product: BMC firmware for RS720A-E9-RS24V2
vendor: ASUS
product: BMC firmware for Z11PR-D16
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 4.9
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: HIGH
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
version: 3.1
Published: 2021-04-06T05:02:12.723Z
CVE-2021-28194 ASUS BMC's firmware: buffer overflow - Remote image configuration setting
The specific function in ASUS BMC’s firmware Web management page (Remote image configuration setting) does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.
Problem types: cwe_id: CWE-120
description: CWE-120 Buffer Overflow
Affected products: vendor: ASUS
product: BMC firmware for ASMB9-iKVM
vendor: ASUS
product: BMC firmware for RS720A-E9-RS24-E
vendor: ASUS
product: BMC firmware for RS700A-E9-RS4
vendor: ASUS
product: BMC firmware for RS700-E9-RS4
vendor: ASUS
product: BMC firmware for ESC4000 G4X
vendor: ASUS
product: BMC firmware for RS700-E9-RS12
vendor: ASUS
product: BMC firmware for RS100-E10-PI2
vendor: ASUS
product: BMC firmware for RS300-E10-PS4
vendor: ASUS
product: BMC firmware for RS300-E10-RS4
vendor: ASUS
product: BMC firmware for RS500A-E9-PS4
vendor: ASUS
product: BMC firmware for RS500A-E9-RS4
vendor: ASUS
product: BMC firmware for RS500A-E9 RS4
vendor: ASUS
product: BMC firmware for E700 G4
vendor: ASUS
product: BMC firmware for WS C422 PRO/SE
vendor: ASUS
product: BMC firmware for WS X299 PRO/SE
vendor: ASUS
product: BMC firmware for Z11PA-U12
vendor: ASUS
product: BMC firmware for Z11PA-U12/10G-2S
vendor: ASUS
product: BMC firmware for KNPA-U16
vendor: ASUS
product: BMC firmware for ESC4000 DHD G4
vendor: ASUS
product: BMC firmware for ESC4000 G4
vendor: ASUS
product: BMC firmware for RS720Q-E9-RS24-S
vendor: ASUS
product: BMC firmware for RS720Q-E9-RS8
vendor: ASUS
product: BMC firmware for RS720Q-E9-RS8-S
vendor: ASUS
product: BMC firmware for Z11PA-D8
vendor: ASUS
product: BMC firmware for Z11PA-D8C
vendor: ASUS
product: BMC firmware for RS720-E9-RS24-U
vendor: ASUS
product: BMC firmware for RS720-E9-RS8-G
vendor: ASUS
product: BMC firmware for RS500-E9-PS4
vendor: ASUS
product: BMC firmware for Pro E800 G4
vendor: ASUS
product: BMC firmware for RS500-E9-RS4
vendor: ASUS
product: BMC firmware for RS500-E9-RS4-U
vendor: ASUS
product: BMC firmware for RS520-E9-RS12-E
vendor: ASUS
product: BMC firmware for RS520-E9-RS8
vendor: ASUS
product: BMC firmware for ESC8000 G4
vendor: ASUS
product: BMC firmware for ESC8000 G4/10G
vendor: ASUS
product: BMC firmware for RS720-E9-RS12-E
vendor: ASUS
product: BMC firmware for WS C621E SAGE
vendor: ASUS
product: BMC firmware for RS500A-E10-PS4
vendor: ASUS
product: BMC firmware for RS500A-E10-RS4
vendor: ASUS
product: BMC firmware for RS700A-E9-RS12V2
vendor: ASUS
product: BMC firmware for RS700A-E9-RS4V2
vendor: ASUS
product: BMC firmware for RS720A-E9-RS12V2
vendor: ASUS
product: BMC firmware for RS720A-E9-RS24V2
vendor: ASUS
product: BMC firmware for Z11PR-D16
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 4.9
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: HIGH
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
version: 3.1
Published: 2021-04-06T05:02:13.511Z
CVE-2021-28195 ASUS BMC's firmware: buffer overflow - Radius configuration function
The Radius configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.
Problem types: cwe_id: CWE-120
description: CWE-120 Buffer Overflow
Affected products: vendor: ASUS
product: BMC firmware for ASMB9-iKVM
vendor: ASUS
product: BMC firmware for RS720A-E9-RS24-E
vendor: ASUS
product: BMC firmware for RS700A-E9-RS4
vendor: ASUS
product: BMC firmware for RS700-E9-RS4
vendor: ASUS
product: BMC firmware for ESC4000 G4X
vendor: ASUS
product: BMC firmware for RS700-E9-RS12
vendor: ASUS
product: BMC firmware for RS100-E10-PI2
vendor: ASUS
product: BMC firmware for RS300-E10-PS4
vendor: ASUS
product: BMC firmware for RS300-E10-RS4
vendor: ASUS
product: BMC firmware for RS500A-E9-PS4
vendor: ASUS
product: BMC firmware for RS500A-E9-RS4
vendor: ASUS
product: BMC firmware for RS500A-E9 RS4
vendor: ASUS
product: BMC firmware for E700 G4
vendor: ASUS
product: BMC firmware for WS C422 PRO/SE
vendor: ASUS
product: BMC firmware for WS X299 PRO/SE
vendor: ASUS
product: BMC firmware for Z11PA-U12
vendor: ASUS
product: BMC firmware for Z11PA-U12/10G-2S
vendor: ASUS
product: BMC firmware for KNPA-U16
vendor: ASUS
product: BMC firmware for ESC4000 DHD G4
vendor: ASUS
product: BMC firmware for ESC4000 G4
vendor: ASUS
product: BMC firmware for RS720Q-E9-RS24-S
vendor: ASUS
product: BMC firmware for RS720Q-E9-RS8
vendor: ASUS
product: BMC firmware for RS720Q-E9-RS8-S
vendor: ASUS
product: BMC firmware for Z11PA-D8
vendor: ASUS
product: BMC firmware for Z11PA-D8C
vendor: ASUS
product: BMC firmware for RS720-E9-RS24-U
vendor: ASUS
product: BMC firmware for RS720-E9-RS8-G
vendor: ASUS
product: BMC firmware for RS500-E9-PS4
vendor: ASUS
product: BMC firmware for Pro E800 G4
vendor: ASUS
product: BMC firmware for RS500-E9-RS4
vendor: ASUS
product: BMC firmware for RS500-E9-RS4-U
vendor: ASUS
product: BMC firmware for RS520-E9-RS12-E
vendor: ASUS
product: BMC firmware for RS520-E9-RS8
vendor: ASUS
product: BMC firmware for ESC8000 G4
vendor: ASUS
product: BMC firmware for ESC8000 G4/10G
vendor: ASUS
product: BMC firmware for RS720-E9-RS12-E
vendor: ASUS
product: BMC firmware for WS C621E SAGE
vendor: ASUS
product: BMC firmware for RS500A-E10-PS4
vendor: ASUS
product: BMC firmware for RS500A-E10-RS4
vendor: ASUS
product: BMC firmware for RS700A-E9-RS12V2
vendor: ASUS
product: BMC firmware for RS700A-E9-RS4V2
vendor: ASUS
product: BMC firmware for RS720A-E9-RS12V2
vendor: ASUS
product: BMC firmware for RS720A-E9-RS24V2
vendor: ASUS
product: BMC firmware for Z11PR-D16
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 4.9
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: HIGH
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
version: 3.1
Published: 2021-04-06T05:02:14.363Z