ASUS Vulnerabilities and Affected Products

Open in search

Vulnerabilities associated with BMC firmware for Z10PE-D16 WS.

Products

Clear product

Showing 18 vulnerabilities on this page for BMC firmware for Z10PE-D16 WS

Signals CISA KEV Ransomware Nuclei
VulnerabilityTitle and contextCVSSEPSSPoCsSignals

ASUS BMC's firmware: path traversal - Delete SOL video file function

The specific function in ASUS BMC’s firmware Web management page (Delete SOL video file function) does not filter the specific parameter. As obtaining the administrator permission, remote attackers can use the means of path traversal to access system files.

CWE-22Apr 6, 2021
CVSS4.9v3.1EPSS1.9%PoCs0SignalsSTIX

ASUS BMC's firmware: command injection - Modify user’s information function

The specific function in ASUS BMC’s firmware Web management page (Modify user’s information function) does not filter the specific parameter. As obtaining the administrator permission, remote attackers can launch command injection to execute command arbitrary.

CWE-78Apr 6, 2021
CVSS7.2v3.1EPSS2.02%PoCs0SignalsSTIX

ASUS BMC's firmware: command injection - Web Set Media Image function

The Web Set Media Image function in ASUS BMC’s firmware Web management page does not filter the specific parameter. As obtaining the administrator permission, remote attackers can launch command injection to execute command arbitrary.

CWE-78Apr 6, 2021
CVSS7.2v3.1EPSS1.96%PoCs0SignalsSTIX

ASUS BMC's firmware: buffer overflow - SMTP configuration function

The SMTP configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.

CWE-120Apr 6, 2021
CVSS4.9v3.1EPSS1.81%PoCs0SignalsSTIX

ASUS BMC's firmware: buffer overflow - Modify user’s information function

The specific function in ASUS BMC’s firmware Web management page (Modify user’s information function) does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.

CWE-120Apr 6, 2021
CVSS4.9v3.1EPSS1.81%PoCs0SignalsSTIX

ASUS BMC's firmware: buffer overflow - Generate new SSL certificate

The specific function in ASUS BMC’s firmware Web management page (Generate new SSL certificate) does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.

CWE-120Apr 6, 2021
CVSS4.9v3.1EPSS1.15%PoCs0SignalsSTIX

ASUS BMC's firmware: buffer overflow - ActiveX configuration-2 acquisition

The specific function in ASUS BMC’s firmware Web management page (ActiveX configuration-2 acquisition) does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.

CWE-120Apr 6, 2021
CVSS4.9v3.1EPSS1.81%PoCs0SignalsSTIX

ASUS BMC's firmware: buffer overflow - ActiveX configuration-1 acquisition

The specific function in ASUS BMC’s firmware Web management page (ActiveX configuration-1 acquisition) does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.

CWE-120Apr 6, 2021
CVSS4.9v3.1EPSS1.81%PoCs0SignalsSTIX

ASUS BMC's firmware: buffer overflow - Active Directory configuration function

The Active Directory configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.

CWE-120Apr 6, 2021
CVSS4.9v3.1EPSS1.81%PoCs0SignalsSTIX

ASUS BMC's firmware: buffer overflow - Web License configuration setting

The specific function in ASUS BMC’s firmware Web management page (Web License configuration setting) does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.

CWE-120Apr 6, 2021
CVSS4.9v3.1EPSS1.81%PoCs0SignalsSTIX

ASUS BMC's firmware: buffer overflow - Web Service configuration function

The Web Service configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.

CWE-120Apr 6, 2021
CVSS4.9v3.1EPSS1.81%PoCs0SignalsSTIX

ASUS BMC's firmware: buffer overflow - Remote video configuration setting

The specific function in ASUS BMC’s firmware Web management page (Remote video configuration setting) does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.

CWE-120Apr 6, 2021
CVSS4.9v3.1EPSS1.81%PoCs0SignalsSTIX

ASUS BMC's firmware: buffer overflow - Audit log configuration setting

The specific function in ASUS BMC’s firmware Web management page (Audit log configuration setting) does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.

CWE-120Apr 6, 2021
CVSS4.9v3.1EPSS1.81%PoCs0SignalsSTIX

ASUS BMC's firmware: buffer overflow - Media support configuration setting

The specific function in ASUS BMC’s firmware Web management page (Media support configuration setting) does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.

CWE-120Apr 6, 2021
CVSS4.9v3.1EPSS1.81%PoCs0SignalsSTIX

ASUS BMC's firmware: buffer overflow - UEFI configuration function

The UEFI configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.

CWE-120Apr 6, 2021
CVSS4.9v3.1EPSS1.81%PoCs0SignalsSTIX

ASUS BMC's firmware: buffer overflow - LDAP configuration function

The LDAP configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.

CWE-120Apr 6, 2021
CVSS4.9v3.1EPSS1.81%PoCs0SignalsSTIX

ASUS BMC's firmware: buffer overflow - DNS configuration function

The DNS configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.

CWE-120Apr 6, 2021
CVSS4.9v3.1EPSS1.86%PoCs0SignalsSTIX

ASUS BMC's firmware: buffer overflow - Radius configuration function

The Radius configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.

CWE-120Apr 6, 2021
CVSS4.9v3.1EPSS1.86%PoCs0SignalsSTIX