CVE-2021-28179: ASUS BMC's firmware: buffer overflow - Media support configuration setting
The specific function in ASUS BMC’s firmware Web management page (Media support configuration setting) does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is CVE-2021-28179?
CVE-2021-28179 is a vulnerability in ASUS BMC’s firmware Web management page that allows remote attackers to cause a buffer overflow and terminate the application.
How severe is CVE-2021-28179?
CVE-2021-28179 has a severity rating of 4.9 (medium).
Which software versions are affected by CVE-2021-28179?
The affected software versions include Asus Z10pr-d16 Firmware 1.14.51 and Asus Asmb8-ikvm Firmware 1.14.51.
How can the vulnerability be exploited?
Remote attackers can exploit CVE-2021-28179 by entering a string of excessive length in the Media support configuration setting of the ASUS BMC’s firmware Web management page.
Are there any official references for CVE-2021-28179?
Yes, you can find official references for CVE-2021-28179 on the ASUS Product Security Advisory page, ASUS support page, and TWNCERT (Taiwan Computer Emergency Response Team) website.