Read the docs

ASUS

Records366All Threatist records
Exploited (KEV)3In CISA KEV
CVSS critical60CVSS 9.0–10.0
CVSS high174CVSS 7.0–8.9

Exploited now

ASUS records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

18 records in Z10pr-d16 Firmware · all components

Priority LOW 26

The SMTP configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01874 Published 2021-04-06 No fix listed CWE-120
Priority LOW 26

The specific function in ASUS BMC’s firmware Web management page (Modify user’s information function) does not verify the string length entered by users, resulting in a Buffer overflow vulnerability.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01874 Published 2021-04-06 No fix listed CWE-120
Priority LOW 26

The specific function in ASUS BMC’s firmware Web management page (ActiveX configuration-2 acquisition) does not verify the string length entered by users, resulting in a Buffer overflow vulnerability.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01874 Published 2021-04-06 No fix listed CWE-120
Priority LOW 26

The specific function in ASUS BMC’s firmware Web management page (ActiveX configuration-1 acquisition) does not verify the string length entered by users, resulting in a Buffer overflow vulnerability.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01874 Published 2021-04-06 No fix listed CWE-120
Priority LOW 26

The Active Directory configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01874 Published 2021-04-06 No fix listed CWE-120
Priority LOW 26

The specific function in ASUS BMC’s firmware Web management page (Web License configuration setting) does not verify the string length entered by users, resulting in a Buffer overflow vulnerability.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01874 Published 2021-04-06 No fix listed CWE-120
Priority LOW 26

The Web Service configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01874 Published 2021-04-06 No fix listed CWE-120
Priority LOW 26

The specific function in ASUS BMC’s firmware Web management page (Remote video configuration setting) does not verify the string length entered by users, resulting in a Buffer overflow vulnerability.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01874 Published 2021-04-06 No fix listed CWE-120
Priority LOW 26

The specific function in ASUS BMC’s firmware Web management page (Audit log configuration setting) does not verify the string length entered by users, resulting in a Buffer overflow vulnerability.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01874 Published 2021-04-06 No fix listed CWE-120
Priority LOW 26

The specific function in ASUS BMC’s firmware Web management page (Media support configuration setting) does not verify the string length entered by users, resulting in a Buffer overflow vulnerability.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01874 Published 2021-04-06 No fix listed CWE-120
Priority LOW 26

The UEFI configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01874 Published 2021-04-06 No fix listed CWE-120
Priority LOW 26

The LDAP configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01874 Published 2021-04-06 No fix listed CWE-120
Priority LOW 26

The DNS configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01927 Published 2021-04-06 No fix listed CWE-120
Priority LOW 26

The Radius configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01927 Published 2021-04-06 No fix listed CWE-120
Priority LOW 25

The specific function in ASUS BMC’s firmware Web management page (Generate new SSL certificate) does not verify the string length entered by users, resulting in a Buffer overflow vulnerability.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01142 Published 2021-04-06 No fix listed CWE-120
Open these records in search →