CVE-2021-28209

ASUS BMC's firmware: path traversal - Delete video file function

The specific function in ASUS BMC’s firmware Web management page (Delete video file function) does not filter the specific parameter. As obtaining the administrator permission, remote attackers can use the means of path traversal to access system files.

CVSS 3.1 · 4.9 Medium EPSS 2.0% KEV · Not listed

Vendors

Asus

Products

Asmb9-ikvm Asmb9-ikvm Firmware E700 G4 and 85 more

CVE-2021-28208

ASUS BMC's firmware: path traversal - Get video file function

The specific function in ASUS BMC’s firmware Web management page (Get video file function) does not filter the specific parameter. As obtaining the administrator permission, remote attackers can use the means of path traversal to access system files.

CVSS 3.1 · 4.9 Medium EPSS 2.0% KEV · Not listed

Vendors

Asus

Products

Asmb9-ikvm Asmb9-ikvm Firmware E700 G4 and 85 more

CVE-2021-28207

ASUS BMC's firmware: path traversal - Get Help file function

The specific function in ASUS BMC’s firmware Web management page (Get Help file function) does not filter the specific parameter. As obtaining the administrator permission, remote attackers can use the means of path traversal to access system files.

CVSS 3.1 · 4.9 Medium EPSS 2.0% KEV · Not listed

Vendors

Asus

Products

Asmb9-ikvm Asmb9-ikvm Firmware E700 G4 and 85 more

CVE-2021-28206

ASUS BMC's firmware: path traversal - Record video file function

The specific function in ASUS BMC’s firmware Web management page (Record video file function) does not filter the specific parameter. As obtaining the administrator permission, remote attackers can use the means of path traversal to access system files.

CVSS 3.1 · 4.9 Medium EPSS 2.0% KEV · Not listed

Vendors

Asus

Products

Asmb9-ikvm Asmb9-ikvm Firmware E700 G4 and 85 more

CVE-2021-28202

ASUS BMC's firmware: buffer overflow - Service configuration-2 function

The Service configuration-2 function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.

CVSS 3.1 · 4.9 Medium EPSS 1.9% KEV · Not listed

Vendors

Asus

Products

Asmb9-ikvm Asmb9-ikvm Firmware E700 G4 and 85 more

CVE-2021-28201

ASUS BMC's firmware: buffer overflow - Service configuration-1 function

The Service configuration-1 function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.

CVSS 3.1 · 4.9 Medium EPSS 1.9% KEV · Not listed

Vendors

Asus

Products

Asmb9-ikvm Asmb9-ikvm Firmware E700 G4 and 85 more

CVE-2021-28200

ASUS BMC's firmware: buffer overflow - CD media configuration function

The CD media configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.

CVSS 3.1 · 4.9 Medium EPSS 1.9% KEV · Not listed

Vendors

Asus

Products

Asmb9-ikvm Asmb9-ikvm Firmware E700 G4 and 85 more

CVE-2021-28199

ASUS BMC's firmware: buffer overflow - Modify user’s information function

The specific function in ASUS BMC’s firmware Web management page (Modify user’s information function) does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.

CVSS 3.1 · 4.9 Medium EPSS 1.9% KEV · Not listed

Vendors

Asus

Products

Asmb9-ikvm Asmb9-ikvm Firmware E700 G4 and 85 more

CVE-2021-28198

ASUS BMC's firmware: buffer overflow - Firmware protocol configuration

The Firmware protocol configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.

CVSS 3.1 · 4.9 Medium EPSS 1.9% KEV · Not listed

Vendors

Asus

Products

Asmb9-ikvm Asmb9-ikvm Firmware E700 G4 and 85 more

CVE-2021-28197

ASUS BMC's firmware: buffer overflow - Active Directory configuration function

The Active Directory configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.

CVSS 3.1 · 4.9 Medium EPSS 1.9% KEV · Not listed

Vendors

Asus

Products

Asmb9-ikvm Asmb9-ikvm Firmware E700 G4 and 85 more

CVE-2021-28196

ASUS BMC's firmware: buffer overflow - Generate SSL certificate function

The specific function in ASUS BMC’s firmware Web management page (Generate SSL certificate function) does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.

CVSS 3.1 · 4.9 Medium EPSS 1.1% KEV · Not listed

Vendors

Asus

Products

Asmb9-ikvm Asmb9-ikvm Firmware E700 G4 and 85 more

CVE-2021-28195

ASUS BMC's firmware: buffer overflow - Radius configuration function

The Radius configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.

CVSS 3.1 · 4.9 Medium EPSS 1.9% KEV · Not listed

Vendors

Asus

Products

Asmb9-ikvm Asmb9-ikvm Firmware E700 G4 and 85 more

CVE-2021-28194

ASUS BMC's firmware: buffer overflow - Remote image configuration setting

The specific function in ASUS BMC’s firmware Web management page (Remote image configuration setting) does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.

CVSS 3.1 · 4.9 Medium EPSS 1.9% KEV · Not listed

Vendors

Asus

Products

Asmb9-ikvm Asmb9-ikvm Firmware E700 G4 and 85 more

CVE-2021-28193

ASUS BMC's firmware: buffer overflow - SMTP configuration function

The SMTP configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.

CVSS 3.1 · 4.9 Medium EPSS 1.9% KEV · Not listed

Vendors

Asus

Products

Asmb9-ikvm Asmb9-ikvm Firmware E700 G4 and 85 more

CVE-2021-28192

ASUS BMC's firmware: buffer overflow - Remote video storage function

The specific function in ASUS BMC’s firmware Web management page (Remote video storage function) does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.

CVSS 3.1 · 4.9 Medium EPSS 1.9% KEV · Not listed

Vendors

Asus

Products

Asmb9-ikvm Asmb9-ikvm Firmware E700 G4 and 85 more

CVE-2021-28191

ASUS BMC's firmware: buffer overflow - Firmware update function

The Firmware update function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.

CVSS 3.1 · 4.9 Medium EPSS 1.9% KEV · Not listed

Vendors

Asus

Products

Asmb9-ikvm Asmb9-ikvm Firmware E700 G4 and 85 more

CVE-2021-28190

ASUS BMC's firmware: buffer overflow - Generate new certificate function

The specific function in ASUS BMC’s firmware Web management page (Generate new certificate function) does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.

CVSS 3.1 · 4.9 Medium EPSS 1.1% KEV · Not listed

Vendors

Asus

Products

Asmb9-ikvm Asmb9-ikvm Firmware E700 G4 and 85 more