Read the docs

ASUS

Records366All Threatist records
Exploited (KEV)3In CISA KEV
CVSS critical60CVSS 9.0–10.0
CVSS high174CVSS 7.0–8.9

Exploited now

ASUS records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

17 records in Asmb9-ikvm Firmware · all components

Priority LOW 26

The specific function in ASUS BMC’s firmware Web management page (Delete video file function) does not filter the specific parameter.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.0197 Published 2021-04-06 No fix listed CWE-22
Priority LOW 26

The specific function in ASUS BMC’s firmware Web management page (Get video file function) does not filter the specific parameter.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.0197 Published 2021-04-06 No fix listed CWE-22
Priority LOW 26

The specific function in ASUS BMC’s firmware Web management page (Get Help file function) does not filter the specific parameter.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.0197 Published 2021-04-06 No fix listed CWE-22
Priority LOW 26

The specific function in ASUS BMC’s firmware Web management page (Record video file function) does not filter the specific parameter.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.0197 Published 2021-04-06 No fix listed CWE-22
Priority LOW 26

The Service configuration-2 function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01874 Published 2021-04-06 No fix listed CWE-120
Priority LOW 26

The Service configuration-1 function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01874 Published 2021-04-06 No fix listed CWE-120
Priority LOW 26

The CD media configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01874 Published 2021-04-06 No fix listed CWE-120
Priority LOW 26

The specific function in ASUS BMC’s firmware Web management page (Modify user’s information function) does not verify the string length entered by users, resulting in a Buffer overflow vulnerability.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01874 Published 2021-04-06 No fix listed CWE-120
Priority LOW 26

The Firmware protocol configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01874 Published 2021-04-06 No fix listed CWE-120
Priority LOW 26

The Active Directory configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01874 Published 2021-04-06 No fix listed CWE-120
Priority LOW 26

The Radius configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01874 Published 2021-04-06 No fix listed CWE-120
Priority LOW 26

The specific function in ASUS BMC’s firmware Web management page (Remote image configuration setting) does not verify the string length entered by users, resulting in a Buffer overflow vulnerability.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01874 Published 2021-04-06 No fix listed CWE-120
Priority LOW 26

The SMTP configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01874 Published 2021-04-06 No fix listed CWE-120
Priority LOW 26

The specific function in ASUS BMC’s firmware Web management page (Remote video storage function) does not verify the string length entered by users, resulting in a Buffer overflow vulnerability.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01874 Published 2021-04-06 No fix listed CWE-120
Priority LOW 26

The Firmware update function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01874 Published 2021-04-06 No fix listed CWE-120
Priority LOW 25

The specific function in ASUS BMC’s firmware Web management page (Generate SSL certificate function) does not verify the string length entered by users, resulting in a Buffer overflow vulnerability.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01142 Published 2021-04-06 No fix listed CWE-120
Priority LOW 25

The specific function in ASUS BMC’s firmware Web management page (Generate new certificate function) does not verify the string length entered by users, resulting in a Buffer overflow vulnerability.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01142 Published 2021-04-06 No fix listed CWE-120
Open these records in search →