CVE-2021-28201
The Service configuration-1 function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.
- Score
- CVSS 3.1 4.9 Medium
- Status
- Modified - twcert@cert.org.tw
- Published
- 2021-04-06
- Last modified
- 2024-09-17
- Weaknesses
- CWE-120
Affected products
- Asmb9-ikvm Firmware (Asus)
- Bmc Firmware For Asmb9-ikvm (Asus)
- Bmc Firmware For E700 G4 (Asus)
- Bmc Firmware For Esc4000 Dhd G4 (Asus)
- Bmc Firmware For Esc4000 G4 (Asus)
- Bmc Firmware For Esc4000 G4x (Asus)
- Bmc Firmware For Esc8000 G4 (Asus)
- Bmc Firmware For Esc8000 G410g (Asus)
- Bmc Firmware For Knpa-u16 (Asus)
- Bmc Firmware For Pro E800 G4 (Asus)
- Bmc Firmware For Rs100-e10-pi2 (Asus)
- Bmc Firmware For Rs300-e10-ps4 (Asus)
- Bmc Firmware For Rs300-e10-rs4 (Asus)
- Bmc Firmware For Rs500-e9-ps4 (Asus)
- Bmc Firmware For Rs500-e9-rs4 (Asus)
- Bmc Firmware For Rs500-e9-rs4-u (Asus)
- Bmc Firmware For Rs500a-e10-ps4 (Asus)
- Bmc Firmware For Rs500a-e10-rs4 (Asus)
- Bmc Firmware For Rs500a-e9-ps4 (Asus)
- Bmc Firmware For Rs500a-e9-rs4 (Asus)
- Bmc Firmware For Rs500a-e9 Rs4 (Asus)
- Bmc Firmware For Rs520-e9-rs12-e (Asus)
- Bmc Firmware For Rs520-e9-rs8 (Asus)
- Bmc Firmware For Rs700-e9-rs12 (Asus)
- Bmc Firmware For Rs700-e9-rs4 (Asus)
- Bmc Firmware For Rs700a-e9-rs12v2 (Asus)
- Bmc Firmware For Rs700a-e9-rs4 (Asus)
- Bmc Firmware For Rs700a-e9-rs4v2 (Asus)
- Bmc Firmware For Rs720-e9-rs12-e (Asus)
- Bmc Firmware For Rs720-e9-rs24-u (Asus)
- Bmc Firmware For Rs720-e9-rs8-g (Asus)
- Bmc Firmware For Rs720a-e9-rs12v2 (Asus)
- Bmc Firmware For Rs720a-e9-rs24-e (Asus)
- Bmc Firmware For Rs720a-e9-rs24v2 (Asus)
- Bmc Firmware For Rs720q-e9-rs24-s (Asus)
- Bmc Firmware For Rs720q-e9-rs8 (Asus)
- Bmc Firmware For Rs720q-e9-rs8-s (Asus)
- Bmc Firmware For Ws C422 Prose (Asus)
- Bmc Firmware For Ws C621e Sage (Asus)
- Bmc Firmware For Ws X299 Prose (Asus)
- Bmc Firmware For Z11pa-d8 (Asus)
- Bmc Firmware For Z11pa-d8c (Asus)
- Bmc Firmware For Z11pa-u12 (Asus)
- Bmc Firmware For Z11pa-u1210g-2s (Asus)
- Bmc Firmware For Z11pr-d16 (Asus)
- E700 G4 Firmware (Asus)
- Esc4000 Dhd G4 Firmware (Asus)
- Esc4000 G4 Firmware (Asus)
- Esc4000 G4x Firmware (Asus)
- Esc8000 G4/10g Firmware (Asus)
- Esc8000 G4 Firmware (Asus)
- Knpa-u16 Firmware (Asus)
- Pro E800 G4 Firmware (Asus)
- Rs100-e10-pi2 Firmware (Asus)
- Rs300-e10-ps4 Firmware (Asus)
- Rs300-e10-rs4 Firmware (Asus)
- Rs500-e9-ps4 Firmware (Asus)
- Rs500-e9-rs4-u Firmware (Asus)
- Rs500-e9-rs4 Firmware (Asus)
- Rs500a-e10-ps4 Firmware (Asus)
- Rs500a-e10-rs4 Firmware (Asus)
- Rs500a-e9-ps4 Firmware (Asus)
- Rs500a-e9-rs4 Firmware (Asus)
- Rs500a-e9 Rs4 U Firmware (Asus)
- Rs520-e9-rs12-e Firmware (Asus)
- Rs520-e9-rs8 Firmware (Asus)
- Rs700-e9-rs12 Firmware (Asus)
- Rs700-e9-rs4 Firmware (Asus)
- Rs700a-e9-rs12v2 Firmware (Asus)
- Rs700a-e9-rs4 Firmware (Asus)
- Rs700a-e9-rs4v2 Firmware (Asus)
- Rs720-e9-rs12-e Firmware (Asus)
- Rs720-e9-rs24-u Firmware (Asus)
- Rs720-e9-rs8-g Firmware (Asus)
- Rs720a-e9-rs12v2 Firmware (Asus)
- Rs720a-e9-rs24-e Firmware (Asus)
- Rs720a-e9-rs24v2 Firmware (Asus)
- Rs720q-e9-rs24-s Firmware (Asus)
- Rs720q-e9-rs8-s Firmware (Asus)
- Rs720q-e9-rs8 Firmware (Asus)
- Ws C422 Pro/se Firmware (Asus)
- Ws C621e Sage Firmware (Asus)
- Ws X299 Pro/se Firmware (Asus)
- Z11pa-d8 Firmware (Asus)
- Z11pa-d8c Firmware (Asus)
- Z11pa-u12/10g-2s Firmware (Asus)
- Z11pa-u12 Firmware (Asus)
- Z11pr-d16 Firmware (Asus)
References
- https://www.asus.com/content/ASUS-Product-Security-Advisory/
- https://www.asus.com/tw/support/callus/
- https://www.twcert.org.tw/tw/cp-132-4571-d454c-1.html
