CVE-2021-28192

ASUS BMC's firmware: buffer overflow - Remote video storage function

The specific function in ASUS BMC’s firmware Web management page (Remote video storage function) does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.

CVSS 3.1 · 4.9 Medium EPSS 1.9% KEV · Not listed

Vendors

Asus

Products

Asmb9-ikvm Asmb9-ikvm Firmware E700 G4 and 85 more

CVE-2021-28191

ASUS BMC's firmware: buffer overflow - Firmware update function

The Firmware update function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.

CVSS 3.1 · 4.9 Medium EPSS 1.9% KEV · Not listed

Vendors

Asus

Products

Asmb9-ikvm Asmb9-ikvm Firmware E700 G4 and 85 more

CVE-2021-28190

ASUS BMC's firmware: buffer overflow - Generate new certificate function

The specific function in ASUS BMC’s firmware Web management page (Generate new certificate function) does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.

CVSS 3.1 · 4.9 Medium EPSS 1.1% KEV · Not listed

Vendors

Asus

Products

Asmb9-ikvm Asmb9-ikvm Firmware E700 G4 and 85 more

CVE-2021-28189

ASUS BMC's firmware: buffer overflow - SMTP configuration function

The SMTP configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.

CVSS 3.1 · 4.9 Medium EPSS 1.9% KEV · Not listed

Vendors

Asus

Products

Asmb8-ikvm Asmb8-ikvm Firmware Z10pe-d16 Ws and 3 more

CVE-2021-28188

ASUS BMC's firmware: buffer overflow - Modify user’s information function

The specific function in ASUS BMC’s firmware Web management page (Modify user’s information function) does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.

CVSS 3.1 · 4.9 Medium EPSS 1.9% KEV · Not listed

Vendors

Asus

Products

Asmb8-ikvm Asmb8-ikvm Firmware Z10pe-d16 Ws and 3 more

CVE-2021-28187

ASUS BMC's firmware: buffer overflow - Generate new SSL certificate

The specific function in ASUS BMC’s firmware Web management page (Generate new SSL certificate) does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.

CVSS 3.1 · 4.9 Medium EPSS 1.1% KEV · Not listed

Vendors

Asus

Products

Asmb8-ikvm Asmb8-ikvm Firmware Z10pe-d16 Ws and 3 more

CVE-2021-28186

ASUS BMC's firmware: buffer overflow - ActiveX configuration-2 acquisition

The specific function in ASUS BMC’s firmware Web management page (ActiveX configuration-2 acquisition) does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.

CVSS 3.1 · 4.9 Medium EPSS 1.9% KEV · Not listed

Vendors

Asus

Products

Asmb8-ikvm Asmb8-ikvm Firmware Z10pe-d16 Ws and 3 more

CVE-2021-28185

ASUS BMC's firmware: buffer overflow - ActiveX configuration-1 acquisition

The specific function in ASUS BMC’s firmware Web management page (ActiveX configuration-1 acquisition) does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.

CVSS 3.1 · 4.9 Medium EPSS 1.9% KEV · Not listed

Vendors

Asus

Products

Asmb8-ikvm Asmb8-ikvm Firmware Z10pe-d16 Ws and 3 more

CVE-2021-28184

ASUS BMC's firmware: buffer overflow - Active Directory configuration function

The Active Directory configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.

CVSS 3.1 · 4.9 Medium EPSS 1.9% KEV · Not listed

Vendors

Asus

Products

Asmb8-ikvm Asmb8-ikvm Firmware Z10pe-d16 Ws and 3 more

CVE-2021-28183

ASUS BMC's firmware: buffer overflow - Web License configuration setting

The specific function in ASUS BMC’s firmware Web management page (Web License configuration setting) does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.

CVSS 3.1 · 4.9 Medium EPSS 1.9% KEV · Not listed

Vendors

Asus

Products

Asmb8-ikvm Asmb8-ikvm Firmware Z10pe-d16 Ws and 3 more

CVE-2021-28182

ASUS BMC's firmware: buffer overflow - Web Service configuration function

The Web Service configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.

CVSS 3.1 · 4.9 Medium EPSS 1.9% KEV · Not listed

Vendors

Asus

Products

Asmb8-ikvm Asmb8-ikvm Firmware Z10pe-d16 Ws and 3 more

CVE-2021-28181

ASUS BMC's firmware: buffer overflow - Remote video configuration setting

The specific function in ASUS BMC’s firmware Web management page (Remote video configuration setting) does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.

CVSS 3.1 · 4.9 Medium EPSS 1.9% KEV · Not listed

Vendors

Asus

Products

Asmb8-ikvm Asmb8-ikvm Firmware Z10pe-d16 Ws and 3 more

CVE-2021-28180

ASUS BMC's firmware: buffer overflow - Audit log configuration setting

The specific function in ASUS BMC’s firmware Web management page (Audit log configuration setting) does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.

CVSS 3.1 · 4.9 Medium EPSS 1.9% KEV · Not listed

Vendors

Asus

Products

Asmb8-ikvm Asmb8-ikvm Firmware Z10pe-d16 Ws and 3 more

CVE-2021-28179

ASUS BMC's firmware: buffer overflow - Media support configuration setting

The specific function in ASUS BMC’s firmware Web management page (Media support configuration setting) does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.

CVSS 3.1 · 4.9 Medium EPSS 1.9% KEV · Not listed

Vendors

Asus

Products

Asmb8-ikvm Asmb8-ikvm Firmware Z10pe-d16 Ws and 3 more

CVE-2021-28178

ASUS BMC's firmware: buffer overflow - UEFI configuration function

The UEFI configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.

CVSS 3.1 · 4.9 Medium EPSS 1.9% KEV · Not listed

Vendors

Asus

Products

Asmb8-ikvm Asmb8-ikvm Firmware Z10pe-d16 Ws and 3 more

CVE-2021-28177

ASUS BMC's firmware: buffer overflow - LDAP configuration function

The LDAP configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.

CVSS 3.1 · 4.9 Medium EPSS 1.9% KEV · Not listed

Vendors

Asus

Products

Asmb8-ikvm Asmb8-ikvm Firmware Z10pe-d16 Ws and 3 more

CVE-2021-28176

ASUS BMC's firmware: buffer overflow - DNS configuration function

The DNS configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.

CVSS 3.1 · 4.9 Medium EPSS 1.9% KEV · Not listed

Vendors

Asus

Products

Asmb8-ikvm Asmb8-ikvm Firmware Z10pe-d16 Ws and 3 more

CVE-2021-28175

ASUS BMC's firmware: buffer overflow - Radius configuration function

The Radius configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.

CVSS 3.1 · 4.9 Medium EPSS 1.9% KEV · Not listed

Vendors

Asus

Products

Asmb8-ikvm Asmb8-ikvm Firmware Z10pe-d16 Ws and 3 more

CVE-2021-28174

Mitake Smart Stock Selection System - Broken Authentication

Mitake smart stock selection system contains a broken authentication vulnerability. By manipulating the parameters in the URL, remote attackers can gain the privileged permissions to access transaction record, and fraudulent trading without login.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed

Vendors

Mitake

Products

Smart Stock Selection

CVE-2021-28173

Vangene deltaFlow E-platform - Arbitrary File Upload

The file upload function of Vangene deltaFlow E-platform does not perform access controlled properly. Remote attackers can upload and execute arbitrary files without login.

CVSS 3.1 · 9.8 Critical EPSS 1.6% KEV · Not listed

Vendors

Deltaflow Project

Products

Deltaflow