CVE-2021-28183: ASUS BMC's firmware: buffer overflow - Web License configuration setting
The specific function in ASUS BMC’s firmware Web management page (Web License configuration setting) does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is CVE-2021-28183?
CVE-2021-28183 is a vulnerability in the ASUS BMC firmware Web management page that allows remote attackers to cause a buffer overflow by entering a long string.
How does CVE-2021-28183 affect ASUS Z10pr-d16 Firmware?
CVE-2021-28183 affects ASUS Z10pr-d16 Firmware version 1.14.51 and can be exploited to obtain privileged permission and terminate the system abnormally.
How does CVE-2021-28183 affect ASUS Asmb8-ikvm Firmware?
CVE-2021-28183 affects ASUS Asmb8-ikvm Firmware version 1.14.51 and can be exploited to obtain privileged permission and terminate the system abnormally.
How does CVE-2021-28183 affect ASUS Z10pe-d16 Ws Firmware?
CVE-2021-28183 affects ASUS Z10pe-d16 Ws Firmware version 1.14.2 and can be exploited to obtain privileged permission and terminate the system abnormally.
What is the severity of CVE-2021-28183?
CVE-2021-28183 has a severity rating of 4.9 (medium).
What is the Common Weakness Enumeration (CWE) ID for CVE-2021-28183?
The Common Weakness Enumeration (CWE) ID for CVE-2021-28183 is CWE-119 and CWE-120.
Where can I find more information about CVE-2021-28183?
You can find more information about CVE-2021-28183 in the ASUS Product Security Advisory, ASUS support website, and Taiwan Computer Emergency Response Team (TW-CERT) website.
How can I fix CVE-2021-28183?
To fix CVE-2021-28183, it is recommended to update the affected ASUS BMC firmware to a version that addresses the vulnerability.