ASUS Vulnerabilities and Affected Products

Products

BMC firmware for ASMB8-iKVM18 vulnerabilities
BMC firmware for Z10PE-D16 WS18 vulnerabilities
BMC firmware for Z10PR-D1618 vulnerabilities
BMC firmware for ASMB9-iKVM17 vulnerabilities
BMC firmware for E700 G417 vulnerabilities
BMC firmware for ESC4000 DHD G417 vulnerabilities
BMC firmware for ESC4000 G417 vulnerabilities
BMC firmware for ESC4000 G4X17 vulnerabilities
BMC firmware for ESC8000 G417 vulnerabilities
BMC firmware for ESC8000 G4/10G17 vulnerabilities
BMC firmware for KNPA-U1617 vulnerabilities
BMC firmware for Pro E800 G417 vulnerabilities
BMC firmware for RS100-E10-PI217 vulnerabilities
BMC firmware for RS300-E10-PS417 vulnerabilities
BMC firmware for RS300-E10-RS417 vulnerabilities
BMC firmware for RS500-E9-PS417 vulnerabilities
BMC firmware for RS500-E9-RS417 vulnerabilities
BMC firmware for RS500-E9-RS4-U17 vulnerabilities
BMC firmware for RS500A-E10-PS417 vulnerabilities
BMC firmware for RS500A-E10-RS417 vulnerabilities
BMC firmware for RS500A-E9 RS417 vulnerabilities
BMC firmware for RS500A-E9-PS417 vulnerabilities
BMC firmware for RS500A-E9-RS417 vulnerabilities
BMC firmware for RS520-E9-RS12-E17 vulnerabilities
BMC firmware for RS520-E9-RS817 vulnerabilities

ASUS vulnerability results
Vulnerability	Title and context	CVSS	EPSS	PoCs	Signals	STIX action
CVE-2021-28209MEDIUM	ASUS BMC's firmware: path traversal - Delete video file function The specific function in ASUS BMC’s firmware Web management page (Delete video file function) does not filter the specific parameter. As obtaining the administrator permission, remote attackers can use the means of path traversal to access system files. CWE-22Apr 6, 2021	CVSS4.9v3.1	EPSS1.9%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX
CVE-2021-28208MEDIUM	ASUS BMC's firmware: path traversal - Get video file function The specific function in ASUS BMC’s firmware Web management page (Get video file function) does not filter the specific parameter. As obtaining the administrator permission, remote attackers can use the means of path traversal to access system files. CWE-22Apr 6, 2021	CVSS4.9v3.1	EPSS1.9%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX
CVE-2021-28207MEDIUM	ASUS BMC's firmware: path traversal - Get Help file function The specific function in ASUS BMC’s firmware Web management page (Get Help file function) does not filter the specific parameter. As obtaining the administrator permission, remote attackers can use the means of path traversal to access system files. CWE-22Apr 6, 2021	CVSS4.9v3.1	EPSS1.9%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX
CVE-2021-28206MEDIUM	ASUS BMC's firmware: path traversal - Record video file function The specific function in ASUS BMC’s firmware Web management page (Record video file function) does not filter the specific parameter. As obtaining the administrator permission, remote attackers can use the means of path traversal to access system files. CWE-22Apr 6, 2021	CVSS4.9v3.1	EPSS1.9%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX
CVE-2021-28202MEDIUM	ASUS BMC's firmware: buffer overflow - Service configuration-2 function The Service configuration-2 function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service. CWE-120Apr 6, 2021	CVSS4.9v3.1	EPSS1.81%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX
CVE-2021-28201MEDIUM	ASUS BMC's firmware: buffer overflow - Service configuration-1 function The Service configuration-1 function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service. CWE-120Apr 6, 2021	CVSS4.9v3.1	EPSS1.81%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX
CVE-2021-28200MEDIUM	ASUS BMC's firmware: buffer overflow - CD media configuration function The CD media configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service. CWE-120Apr 6, 2021	CVSS4.9v3.1	EPSS1.81%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX
CVE-2021-28199MEDIUM	ASUS BMC's firmware: buffer overflow - Modify user’s information function The specific function in ASUS BMC’s firmware Web management page (Modify user’s information function) does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service. CWE-120Apr 6, 2021	CVSS4.9v3.1	EPSS1.81%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX
CVE-2021-28198MEDIUM	ASUS BMC's firmware: buffer overflow - Firmware protocol configuration The Firmware protocol configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service. CWE-120Apr 6, 2021	CVSS4.9v3.1	EPSS1.81%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX
CVE-2021-28197MEDIUM	ASUS BMC's firmware: buffer overflow - Active Directory configuration function The Active Directory configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service. CWE-120Apr 6, 2021	CVSS4.9v3.1	EPSS1.81%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX
CVE-2021-28196MEDIUM	ASUS BMC's firmware: buffer overflow - Generate SSL certificate function The specific function in ASUS BMC’s firmware Web management page (Generate SSL certificate function) does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service. CWE-120Apr 6, 2021	CVSS4.9v3.1	EPSS1.15%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX
CVE-2021-28195MEDIUM	ASUS BMC's firmware: buffer overflow - Radius configuration function The Radius configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service. CWE-120Apr 6, 2021	CVSS4.9v3.1	EPSS1.81%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX
CVE-2021-28194MEDIUM	ASUS BMC's firmware: buffer overflow - Remote image configuration setting The specific function in ASUS BMC’s firmware Web management page (Remote image configuration setting) does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service. CWE-120Apr 6, 2021	CVSS4.9v3.1	EPSS1.81%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX
CVE-2021-28193MEDIUM	ASUS BMC's firmware: buffer overflow - SMTP configuration function The SMTP configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service. CWE-120Apr 6, 2021	CVSS4.9v3.1	EPSS1.81%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX
CVE-2021-28192MEDIUM	ASUS BMC's firmware: buffer overflow - Remote video storage function The specific function in ASUS BMC’s firmware Web management page (Remote video storage function) does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service. CWE-120Apr 6, 2021	CVSS4.9v3.1	EPSS1.81%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX
CVE-2021-28191MEDIUM	ASUS BMC's firmware: buffer overflow - Firmware update function The Firmware update function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service. CWE-120Apr 6, 2021	CVSS4.9v3.1	EPSS1.81%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX
CVE-2021-28190MEDIUM	ASUS BMC's firmware: buffer overflow - Generate new certificate function The specific function in ASUS BMC’s firmware Web management page (Generate new certificate function) does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service. CWE-120Apr 6, 2021	CVSS4.9v3.1	EPSS1.15%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX