Latest CVE Feed
-
6.8
MEDIUMCVE-2021-28208
The specific function in ASUS BMC’s firmware Web management page (Get video file function) does not filter the specific parameter. As obtaining the administrator permission, remote attackers can use the means of path traversal to access system files.... Read more
- EPSS Score: %0.50
- Published: Apr. 06, 2021
- Modified: Nov. 21, 2024
-
6.8
MEDIUMCVE-2021-28207
The specific function in ASUS BMC’s firmware Web management page (Get Help file function) does not filter the specific parameter. As obtaining the administrator permission, remote attackers can use the means of path traversal to access system files.... Read more
- EPSS Score: %0.50
- Published: Apr. 06, 2021
- Modified: Nov. 21, 2024
-
6.8
MEDIUMCVE-2021-28206
The specific function in ASUS BMC’s firmware Web management page (Record video file function) does not filter the specific parameter. As obtaining the administrator permission, remote attackers can use the means of path traversal to access system files.... Read more
- EPSS Score: %0.50
- Published: Apr. 06, 2021
- Modified: Nov. 21, 2024
-
6.8
MEDIUMCVE-2021-28205
The specific function in ASUS BMC’s firmware Web management page (Delete SOL video file function) does not filter the specific parameter. As obtaining the administrator permission, remote attackers can use the means of path traversal to access system file... Read more
Affected Products : z10pr-d16_firmware asmb8-ikvm_firmware z10pe-d16_ws_firmware z10pr-d16 asmb8-ikvm z10pe-d16_ws- EPSS Score: %0.50
- Published: Apr. 06, 2021
- Modified: Nov. 21, 2024
-
7.2
HIGHCVE-2021-28204
The specific function in ASUS BMC’s firmware Web management page (Modify user’s information function) does not filter the specific parameter. As obtaining the administrator permission, remote attackers can launch command injection to execute command arbit... Read more
Affected Products : z10pr-d16_firmware asmb8-ikvm_firmware z10pe-d16_ws_firmware z10pr-d16 asmb8-ikvm z10pe-d16_ws- EPSS Score: %1.75
- Published: Apr. 06, 2021
- Modified: Nov. 21, 2024
-
7.2
HIGHCVE-2021-28203
The Web Set Media Image function in ASUS BMC’s firmware Web management page does not filter the specific parameter. As obtaining the administrator permission, remote attackers can launch command injection to execute command arbitrary.... Read more
Affected Products : z10pr-d16_firmware asmb8-ikvm_firmware z10pe-d16_ws_firmware z10pr-d16 asmb8-ikvm z10pe-d16_ws- EPSS Score: %1.75
- Published: Apr. 06, 2021
- Modified: Nov. 21, 2024
-
4.9
MEDIUMCVE-2021-28202
The Service configuration-2 function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to a... Read more
- EPSS Score: %0.90
- Published: Apr. 06, 2021
- Modified: Nov. 21, 2024
-
4.9
MEDIUMCVE-2021-28201
The Service configuration-1 function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to a... Read more
- EPSS Score: %0.90
- Published: Apr. 06, 2021
- Modified: Nov. 21, 2024
-
4.9
MEDIUMCVE-2021-28200
The CD media configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to ab... Read more
- EPSS Score: %0.90
- Published: Apr. 06, 2021
- Modified: Nov. 21, 2024
-
4.9
MEDIUMCVE-2021-28199
The specific function in ASUS BMC’s firmware Web management page (Modify user’s information function) does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attacker... Read more
- EPSS Score: %0.90
- Published: Apr. 06, 2021
- Modified: Nov. 21, 2024
-
4.9
MEDIUMCVE-2021-28198
The Firmware protocol configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leak... Read more
- EPSS Score: %0.90
- Published: Apr. 06, 2021
- Modified: Nov. 21, 2024
-
4.9
MEDIUMCVE-2021-28197
The Active Directory configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leaka... Read more
- EPSS Score: %0.90
- Published: Apr. 06, 2021
- Modified: Nov. 21, 2024
-
4.9
MEDIUMCVE-2021-28196
The specific function in ASUS BMC’s firmware Web management page (Generate SSL certificate function) does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers... Read more
- EPSS Score: %0.66
- Published: Apr. 06, 2021
- Modified: Nov. 21, 2024
-
4.9
MEDIUMCVE-2021-28195
The Radius configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abno... Read more
- EPSS Score: %0.90
- Published: Apr. 06, 2021
- Modified: Nov. 21, 2024
-
4.9
MEDIUMCVE-2021-28194
The specific function in ASUS BMC’s firmware Web management page (Remote image configuration setting) does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attacker... Read more
- EPSS Score: %0.90
- Published: Apr. 06, 2021
- Modified: Nov. 21, 2024
-
4.9
MEDIUMCVE-2021-28193
The SMTP configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnorm... Read more
- EPSS Score: %0.90
- Published: Apr. 06, 2021
- Modified: Nov. 21, 2024
-
4.9
MEDIUMCVE-2021-28192
The specific function in ASUS BMC’s firmware Web management page (Remote video storage function) does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use... Read more
- EPSS Score: %0.90
- Published: Apr. 06, 2021
- Modified: Nov. 21, 2024
-
4.9
MEDIUMCVE-2021-28191
The Firmware update function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormall... Read more
- EPSS Score: %0.90
- Published: Apr. 06, 2021
- Modified: Nov. 21, 2024
-
4.9
MEDIUMCVE-2021-28190
The specific function in ASUS BMC’s firmware Web management page (Generate new certificate function) does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers... Read more
- EPSS Score: %0.66
- Published: Apr. 06, 2021
- Modified: Nov. 21, 2024
-
4.9
MEDIUMCVE-2021-28189
The SMTP configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnorm... Read more
Affected Products : z10pr-d16_firmware asmb8-ikvm_firmware z10pe-d16_ws_firmware z10pr-d16 asmb8-ikvm z10pe-d16_ws- EPSS Score: %0.90
- Published: Apr. 06, 2021
- Modified: Nov. 21, 2024