CVE-2021-28180: ASUS BMC's firmware: buffer overflow - Audit log configuration setting
The specific function in ASUS BMC’s firmware Web management page (Audit log configuration setting) does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is CVE-2021-28180?
CVE-2021-28180 is a vulnerability in ASUS BMC's firmware Web management page that allows remote attackers to cause a buffer overflow and potentially disrupt the system.
How does CVE-2021-28180 affect the Asus Z10pr-d16 Firmware?
The Asus Z10pr-d16 Firmware version 1.14.51 is affected by CVE-2021-28180.
Is the Asus Z10pr-d16 vulnerable to CVE-2021-28180?
Yes, the Asus Z10pr-d16 is vulnerable to CVE-2021-28180 if it is running firmware version 1.14.51.
How does CVE-2021-28180 affect the Asus Asmb8-ikvm Firmware?
The Asus Asmb8-ikvm Firmware version 1.14.51 is affected by CVE-2021-28180.
Is the Asus Asmb8-ikvm vulnerable to CVE-2021-28180?
Yes, the Asus Asmb8-ikvm is vulnerable to CVE-2021-28180 if it is running firmware version 1.14.51.
How does CVE-2021-28180 affect the Asus Z10pe-d16 Ws Firmware?
The Asus Z10pe-d16 Ws Firmware version 1.14.2 is affected by CVE-2021-28180.
Is the Asus Z10pe-d16 Ws vulnerable to CVE-2021-28180?
Yes, the Asus Z10pe-d16 Ws is vulnerable to CVE-2021-28180 if it is running firmware version 1.14.2.
What is the severity of CVE-2021-28180?
CVE-2021-28180 has a severity rating of 4.9 (medium).
What is the CWE of CVE-2021-28180?
CVE-2021-28180 is associated with CWE-119 and CWE-120.
Where can I find more information about CVE-2021-28180?
More information about CVE-2021-28180 can be found on the ASUS Product Security Advisory page and the TWCERT/CC website.