CVE-2021-28184: ASUS BMC's firmware: buffer overflow - Active Directory configuration function
The Active Directory configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is CVE-2021-28184?
CVE-2021-28184 is a vulnerability in the Active Directory configuration function in ASUS BMC's firmware Web management page.
How does CVE-2021-28184 impact ASUS Z10pr-d16 firmware?
CVE-2021-28184 impacts ASUS Z10pr-d16 firmware version 1.14.51 by allowing remote attackers to exploit a buffer overflow vulnerability and terminate the Web service.
Is ASUS Z10pr-d16 vulnerable to CVE-2021-28184?
Yes, ASUS Z10pr-d16 firmware version 1.14.51 is vulnerable to CVE-2021-28184.
Is ASUS Z10pr-d16 hardware vulnerable to CVE-2021-28184?
No, ASUS Z10pr-d16 hardware is not vulnerable to CVE-2021-28184.
How severe is CVE-2021-28184?
CVE-2021-28184 has a severity score of 4.9 (medium).
How can I fix CVE-2021-28184 on ASUS Z10pr-d16 firmware?
To fix CVE-2021-28184 on ASUS Z10pr-d16 firmware, update to version 1.14.52 or later.
Are there any references for CVE-2021-28184?
Yes, you can find references for CVE-2021-28184 at the following links: [1] [2] [3].
What is the CWE classification for CVE-2021-28184?
CVE-2021-28184 is classified as CWE-119 and CWE-120.