ASUS BMC's firmware: buffer overflow - Firmware update function
Priority LOW 26CWE-120Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- High
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Denial of service
- Confidentiality · integrity · availability
- None · None · High
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-120 and the CVSS impact.
Summary
The Firmware update function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.
Why it matters now
EPSS 0.01874 79th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| ASUS | BMC firmware for ASMB9-iKVM | 1.11.12 | — | No fix listed | CNA |
| ASUS | BMC firmware for RS720A-E9-RS24-E | 1.10.3 | — | No fix listed | CNA |
| ASUS | BMC firmware for RS700A-E9-RS4 | 1.10.0 | — | No fix listed | CNA |
| ASUS | BMC firmware for RS700-E9-RS4 | 1.09 | — | No fix listed | CNA |
| ASUS | BMC firmware for ESC4000 G4X | 1.11.6 | — | No fix listed | CNA |
| ASUS | BMC firmware for RS700-E9-RS12 | 1.11.5 | — | No fix listed | CNA |
| ASUS | BMC firmware for RS100-E10-PI2 | 1.13.6 | — | No fix listed | CNA |
| ASUS | BMC firmware for RS300-E10-PS4 | 1.13.6 | — | No fix listed | CNA |
| ASUS | BMC firmware for RS300-E10-RS4 | 1.13.6 | — | No fix listed | CNA |
| ASUS | BMC firmware for RS500A-E9-PS4 | 1.14.1 | — | No fix listed | CNA |
| ASUS | BMC firmware for RS500A-E9-RS4 | 1.14.1 | — | No fix listed | CNA |
| ASUS | BMC firmware for RS500A-E9 RS4 | 1.14.1 | — | No fix listed | CNA |
| ASUS | BMC firmware for E700 G4 | 1.14.1 | — | No fix listed | CNA |
| ASUS | BMC firmware for WS C422 PRO/SE | 1.14.1 | — | No fix listed | CNA |
| ASUS | BMC firmware for WS X299 PRO/SE | 1.14.1 | — | No fix listed | CNA |
| ASUS | BMC firmware for Z11PA-U12 | 1.15.1 | — | No fix listed | CNA |
| ASUS | BMC firmware for Z11PA-U12/10G-2S | 1.15.1 | — | No fix listed | CNA |
| ASUS | BMC firmware for KNPA-U16 | 1.13.4 | — | No fix listed | CNA |
| ASUS | BMC firmware for ESC4000 DHD G4 | 1.13.7 | — | No fix listed | CNA |
| ASUS | BMC firmware for ESC4000 G4 | 1.15.2 | — | No fix listed | CNA |
| ASUS | BMC firmware for RS720Q-E9-RS24-S | 1.15.0 | — | No fix listed | CNA |
| ASUS | BMC firmware for RS720Q-E9-RS8 | 1.15.0 | — | No fix listed | CNA |
| ASUS | BMC firmware for RS720Q-E9-RS8-S | 1.15.0 | — | No fix listed | CNA |
| ASUS | BMC firmware for Z11PA-D8 | 1.14.1 | — | No fix listed | CNA |
| ASUS | BMC firmware for Z11PA-D8C | 1.14.1 | — | No fix listed | CNA |
| ASUS | BMC firmware for RS720-E9-RS24-U | 1.14.3 | — | No fix listed | CNA |
| ASUS | BMC firmware for RS720-E9-RS8-G | 1.15.2 | — | No fix listed | CNA |
| ASUS | BMC firmware for RS500-E9-PS4 | 1.15.4 | — | No fix listed | CNA |
| ASUS | BMC firmware for Pro E800 G4 | 1.14.2 | — | No fix listed | CNA |
| ASUS | BMC firmware for RS500-E9-RS4 | 1.15.4 | — | No fix listed | CNA |
| ASUS | BMC firmware for RS500-E9-RS4-U | 1.15.4 | — | No fix listed | CNA |
| ASUS | BMC firmware for RS520-E9-RS12-E | 1.15.3 | — | No fix listed | CNA |
| ASUS | BMC firmware for RS520-E9-RS8 | 1.15.3 | — | No fix listed | CNA |
| ASUS | BMC firmware for ESC8000 G4 | 1.15.4 | — | No fix listed | CNA |
| ASUS | BMC firmware for ESC8000 G4/10G | 1.15.4 | — | No fix listed | CNA |
| ASUS | BMC firmware for RS720-E9-RS12-E | 1.15.2 | — | No fix listed | CNA |
| ASUS | BMC firmware for WS C621E SAGE | 1.15.1 | — | No fix listed | CNA |
| ASUS | BMC firmware for RS500A-E10-PS4 | 1.15.2 | — | No fix listed | CNA |
| ASUS | BMC firmware for RS500A-E10-RS4 | 1.15.2 | — | No fix listed | CNA |
| ASUS | BMC firmware for RS700A-E9-RS12V2 | 1.15.1 | — | No fix listed | CNA |
| ASUS | BMC firmware for RS700A-E9-RS4V2 | 1.15.1 | — | No fix listed | CNA |
| ASUS | BMC firmware for RS720A-E9-RS12V2 | 1.15.2 | — | No fix listed | CNA |
| ASUS | BMC firmware for RS720A-E9-RS24V2 | 1.15.1 | — | No fix listed | CNA |
| ASUS | BMC firmware for Z11PR-D16 | 1.15.3 | — | No fix listed | CNA |
- BMC firmware for ASMB9-iKVM VendorASUS Affected 1.11.12 Fixed in — No fix listed CNA
- BMC firmware for RS720A-E9-RS24-E VendorASUS Affected 1.10.3 Fixed in — No fix listed CNA
- BMC firmware for RS700A-E9-RS4 VendorASUS Affected 1.10.0 Fixed in — No fix listed CNA
- BMC firmware for RS700-E9-RS4 VendorASUS Affected 1.09 Fixed in — No fix listed CNA
- BMC firmware for ESC4000 G4X VendorASUS Affected 1.11.6 Fixed in — No fix listed CNA
- BMC firmware for RS700-E9-RS12 VendorASUS Affected 1.11.5 Fixed in — No fix listed CNA
- BMC firmware for RS100-E10-PI2 VendorASUS Affected 1.13.6 Fixed in — No fix listed CNA
- BMC firmware for RS300-E10-PS4 VendorASUS Affected 1.13.6 Fixed in — No fix listed CNA
- BMC firmware for RS300-E10-RS4 VendorASUS Affected 1.13.6 Fixed in — No fix listed CNA
- BMC firmware for RS500A-E9-PS4 VendorASUS Affected 1.14.1 Fixed in — No fix listed CNA
- BMC firmware for RS500A-E9-RS4 VendorASUS Affected 1.14.1 Fixed in — No fix listed CNA
- BMC firmware for RS500A-E9 RS4 VendorASUS Affected 1.14.1 Fixed in — No fix listed CNA
- BMC firmware for E700 G4 VendorASUS Affected 1.14.1 Fixed in — No fix listed CNA
- BMC firmware for WS C422 PRO/SE VendorASUS Affected 1.14.1 Fixed in — No fix listed CNA
- BMC firmware for WS X299 PRO/SE VendorASUS Affected 1.14.1 Fixed in — No fix listed CNA
- BMC firmware for Z11PA-U12 VendorASUS Affected 1.15.1 Fixed in — No fix listed CNA
- BMC firmware for Z11PA-U12/10G-2S VendorASUS Affected 1.15.1 Fixed in — No fix listed CNA
- BMC firmware for KNPA-U16 VendorASUS Affected 1.13.4 Fixed in — No fix listed CNA
- BMC firmware for ESC4000 DHD G4 VendorASUS Affected 1.13.7 Fixed in — No fix listed CNA
- BMC firmware for ESC4000 G4 VendorASUS Affected 1.15.2 Fixed in — No fix listed CNA
- BMC firmware for RS720Q-E9-RS24-S VendorASUS Affected 1.15.0 Fixed in — No fix listed CNA
- BMC firmware for RS720Q-E9-RS8 VendorASUS Affected 1.15.0 Fixed in — No fix listed CNA
- BMC firmware for RS720Q-E9-RS8-S VendorASUS Affected 1.15.0 Fixed in — No fix listed CNA
- BMC firmware for Z11PA-D8 VendorASUS Affected 1.14.1 Fixed in — No fix listed CNA
- BMC firmware for Z11PA-D8C VendorASUS Affected 1.14.1 Fixed in — No fix listed CNA
- BMC firmware for RS720-E9-RS24-U VendorASUS Affected 1.14.3 Fixed in — No fix listed CNA
- BMC firmware for RS720-E9-RS8-G VendorASUS Affected 1.15.2 Fixed in — No fix listed CNA
- BMC firmware for RS500-E9-PS4 VendorASUS Affected 1.15.4 Fixed in — No fix listed CNA
- BMC firmware for Pro E800 G4 VendorASUS Affected 1.14.2 Fixed in — No fix listed CNA
- BMC firmware for RS500-E9-RS4 VendorASUS Affected 1.15.4 Fixed in — No fix listed CNA
- BMC firmware for RS500-E9-RS4-U VendorASUS Affected 1.15.4 Fixed in — No fix listed CNA
- BMC firmware for RS520-E9-RS12-E VendorASUS Affected 1.15.3 Fixed in — No fix listed CNA
- BMC firmware for RS520-E9-RS8 VendorASUS Affected 1.15.3 Fixed in — No fix listed CNA
- BMC firmware for ESC8000 G4 VendorASUS Affected 1.15.4 Fixed in — No fix listed CNA
- BMC firmware for ESC8000 G4/10G VendorASUS Affected 1.15.4 Fixed in — No fix listed CNA
- BMC firmware for RS720-E9-RS12-E VendorASUS Affected 1.15.2 Fixed in — No fix listed CNA
- BMC firmware for WS C621E SAGE VendorASUS Affected 1.15.1 Fixed in — No fix listed CNA
- BMC firmware for RS500A-E10-PS4 VendorASUS Affected 1.15.2 Fixed in — No fix listed CNA
- BMC firmware for RS500A-E10-RS4 VendorASUS Affected 1.15.2 Fixed in — No fix listed CNA
- BMC firmware for RS700A-E9-RS12V2 VendorASUS Affected 1.15.1 Fixed in — No fix listed CNA
- BMC firmware for RS700A-E9-RS4V2 VendorASUS Affected 1.15.1 Fixed in — No fix listed CNA
- BMC firmware for RS720A-E9-RS12V2 VendorASUS Affected 1.15.2 Fixed in — No fix listed CNA
- BMC firmware for RS720A-E9-RS24V2 VendorASUS Affected 1.15.1 Fixed in — No fix listed CNA
- BMC firmware for Z11PR-D16 VendorASUS Affected 1.15.3 Fixed in — No fix listed CNA
CPE configurations NVD · 88
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:asus:asmb9-ikvm_firmware:1.11.12:*:*:*:*:*:*:* | 1.11.12 | Vulnerable | ASUS |
| cpe:2.3:h:asus:asmb9-ikvm:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:o:asus:rs720a-e9-rs24-e_firmware:1.10.3:*:*:*:*:*:*:* | 1.10.3 | Vulnerable | ASUS |
| cpe:2.3:h:asus:rs720a-e9-rs24-e:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:o:asus:rs700a-e9-rs4_firmware:1.10.0:*:*:*:*:*:*:* | 1.10.0 | Vulnerable | ASUS |
| cpe:2.3:h:asus:rs700a-e9-rs4:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:o:asus:rs700-e9-rs4_firmware:1.09:*:*:*:*:*:*:* | 1.09 | Vulnerable | ASUS |
| cpe:2.3:h:asus:rs700-e9-rs4:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:o:asus:esc4000_g4x_firmware:1.11.6:*:*:*:*:*:*:* | 1.11.6 | Vulnerable | ASUS |
| cpe:2.3:h:asus:esc4000_g4x:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
- cpe:2.3:o:asus:asmb9-ikvm_firmware:1.11.12:*:*:*:*:*:*:* Versions 1.11.12 Vulnerable ·ASUS
- cpe:2.3:h:asus:asmb9-ikvm:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:o:asus:rs720a-e9-rs24-e_firmware:1.10.3:*:*:*:*:*:*:* Versions 1.10.3 Vulnerable ·ASUS
- cpe:2.3:h:asus:rs720a-e9-rs24-e:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:o:asus:rs700a-e9-rs4_firmware:1.10.0:*:*:*:*:*:*:* Versions 1.10.0 Vulnerable ·ASUS
- cpe:2.3:h:asus:rs700a-e9-rs4:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:o:asus:rs700-e9-rs4_firmware:1.09:*:*:*:*:*:*:* Versions 1.09 Vulnerable ·ASUS
- cpe:2.3:h:asus:rs700-e9-rs4:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:o:asus:esc4000_g4x_firmware:1.11.6:*:*:*:*:*:*:* Versions 1.11.6 Vulnerable ·ASUS
- cpe:2.3:h:asus:esc4000_g4x:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
Show 78 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:asus:rs700-e9-rs12_firmware:1.11.5:*:*:*:*:*:*:* | 1.11.5 | Vulnerable | ASUS |
| cpe:2.3:h:asus:rs700-e9-rs12:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:o:asus:rs100-e10-pi2_firmware:1.13.6:*:*:*:*:*:*:* | 1.13.6 | Vulnerable | ASUS |
| cpe:2.3:h:asus:rs100-e10-pi2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:o:asus:rs300-e10-ps4_firmware:1.13.6:*:*:*:*:*:*:* | 1.13.6 | Vulnerable | ASUS |
| cpe:2.3:h:asus:rs300-e10-ps4:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:o:asus:rs300-e10-rs4_firmware:1.13.6:*:*:*:*:*:*:* | 1.13.6 | Vulnerable | ASUS |
| cpe:2.3:h:asus:rs300-e10-rs4:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:o:asus:rs500a-e9-ps4_firmware:1.14.1:*:*:*:*:*:*:* | 1.14.1 | Vulnerable | ASUS |
| cpe:2.3:h:asus:rs500a-e9-ps4:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:o:asus:rs500a-e9-rs4_firmware:1.14.1:*:*:*:*:*:*:* | 1.14.1 | Vulnerable | ASUS |
| cpe:2.3:h:asus:rs500a-e9-rs4:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:o:asus:rs500a-e9_rs4_u_firmware:1.14.1:*:*:*:*:*:*:* | 1.14.1 | Vulnerable | ASUS |
| cpe:2.3:h:asus:rs500a-e9_rs4_u:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:o:asus:e700_g4_firmware:1.14.1:*:*:*:*:*:*:* | 1.14.1 | Vulnerable | ASUS |
| cpe:2.3:h:asus:e700_g4:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:o:asus:ws_c422_pro\/se_firmware:1.14.1:*:*:*:*:*:*:* | 1.14.1 | Vulnerable | ASUS |
| cpe:2.3:h:asus:ws_c422_pro\/se:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:o:asus:ws_x299_pro\/se_firmware:1.14.1:*:*:*:*:*:*:* | 1.14.1 | Vulnerable | ASUS |
| cpe:2.3:h:asus:ws_x299_pro\/se:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:o:asus:z11pa-u12_firmware:1.15.1:*:*:*:*:*:*:* | 1.15.1 | Vulnerable | ASUS |
| cpe:2.3:h:asus:z11pa-u12:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:o:asus:z11pa-u12\/10g-2s_firmware:1.15.1:*:*:*:*:*:*:* | 1.15.1 | Vulnerable | ASUS |
| cpe:2.3:h:asus:z11pa-u12\/10g-2s:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:o:asus:knpa-u16_firmware:1.13.4:*:*:*:*:*:*:* | 1.13.4 | Vulnerable | ASUS |
| cpe:2.3:h:asus:knpa-u16:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:o:asus:esc4000_dhd_g4_firmware:1.13.7:*:*:*:*:*:*:* | 1.13.7 | Vulnerable | ASUS |
| cpe:2.3:h:asus:esc4000_dhd_g4:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:o:asus:esc4000_g4_firmware:1.15.2:*:*:*:*:*:*:* | 1.15.2 | Vulnerable | ASUS |
| cpe:2.3:h:asus:esc4000_g4:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:o:asus:rs720q-e9-rs24-s_firmware:1.15.0:*:*:*:*:*:*:* | 1.15.0 | Vulnerable | ASUS |
| cpe:2.3:h:asus:rs720q-e9-rs24-s:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:o:asus:rs720q-e9-rs8_firmware:1.15.0:*:*:*:*:*:*:* | 1.15.0 | Vulnerable | ASUS |
| cpe:2.3:h:asus:rs720q-e9-rs8:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:o:asus:rs720q-e9-rs8-s_firmware:1.15.0:*:*:*:*:*:*:* | 1.15.0 | Vulnerable | ASUS |
| cpe:2.3:h:asus:rs720q-e9-rs8-s:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:o:asus:z11pa-d8_firmware:1.14.1:*:*:*:*:*:*:* | 1.14.1 | Vulnerable | ASUS |
| cpe:2.3:h:asus:z11pa-d8:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:o:asus:z11pa-d8c_firmware:1.14.1:*:*:*:*:*:*:* | 1.14.1 | Vulnerable | ASUS |
| cpe:2.3:h:asus:z11pa-d8c:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:o:asus:rs720-e9-rs24-u_firmware:1.14.3:*:*:*:*:*:*:* | 1.14.3 | Vulnerable | ASUS |
| cpe:2.3:h:asus:rs720-e9-rs24-u:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:o:asus:rs720-e9-rs8-g_firmware:1.15.2:*:*:*:*:*:*:* | 1.15.2 | Vulnerable | ASUS |
| cpe:2.3:h:asus:rs720-e9-rs8-g:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:o:asus:rs500-e9-ps4_firmware:1.15.4:*:*:*:*:*:*:* | 1.15.4 | Vulnerable | ASUS |
| cpe:2.3:h:asus:rs500-e9-ps4:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:o:asus:pro_e800_g4_firmware:1.14.2:*:*:*:*:*:*:* | 1.14.2 | Vulnerable | ASUS |
| cpe:2.3:h:asus:pro_e800_g4:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:o:asus:rs500-e9-rs4_firmware:1.15.4:*:*:*:*:*:*:* | 1.15.4 | Vulnerable | ASUS |
| cpe:2.3:h:asus:rs500-e9-rs4:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:o:asus:rs500-e9-rs4-u_firmware:1.15.4:*:*:*:*:*:*:* | 1.15.4 | Vulnerable | ASUS |
| cpe:2.3:h:asus:rs500-e9-rs4-u:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:o:asus:rs520-e9-rs12-e_firmware:1.15.3:*:*:*:*:*:*:* | 1.15.3 | Vulnerable | ASUS |
| cpe:2.3:h:asus:rs520-e9-rs12-e:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:o:asus:rs520-e9-rs8_firmware:1.15.3:*:*:*:*:*:*:* | 1.15.3 | Vulnerable | ASUS |
| cpe:2.3:h:asus:rs520-e9-rs8:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:o:asus:esc8000_g4_firmware:1.15.4:*:*:*:*:*:*:* | 1.15.4 | Vulnerable | ASUS |
| cpe:2.3:h:asus:esc8000_g4:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:o:asus:esc8000_g4\/10g_firmware:1.15.4:*:*:*:*:*:*:* | 1.15.4 | Vulnerable | ASUS |
| cpe:2.3:h:asus:esc8000_g4\/10g:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:o:asus:rs720-e9-rs12-e_firmware:1.15.2:*:*:*:*:*:*:* | 1.15.2 | Vulnerable | ASUS |
| cpe:2.3:h:asus:rs720-e9-rs12-e:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:o:asus:ws_c621e_sage_firmware:1.15.1:*:*:*:*:*:*:* | 1.15.1 | Vulnerable | ASUS |
| cpe:2.3:h:asus:ws_c621e_sage:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:o:asus:rs500a-e10-ps4_firmware:1.15.2:*:*:*:*:*:*:* | 1.15.2 | Vulnerable | ASUS |
| cpe:2.3:h:asus:rs500a-e10-ps4:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:o:asus:rs500a-e10-rs4_firmware:1.15.2:*:*:*:*:*:*:* | 1.15.2 | Vulnerable | ASUS |
| cpe:2.3:h:asus:rs500a-e10-rs4:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:o:asus:rs700a-e9-rs12v2_firmware:1.15.1:*:*:*:*:*:*:* | 1.15.1 | Vulnerable | ASUS |
| cpe:2.3:h:asus:rs700a-e9-rs12v2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:o:asus:rs700a-e9-rs4v2_firmware:1.15.1:*:*:*:*:*:*:* | 1.15.1 | Vulnerable | ASUS |
| cpe:2.3:h:asus:rs700a-e9-rs4v2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:o:asus:rs720a-e9-rs12v2_firmware:1.15.2:*:*:*:*:*:*:* | 1.15.2 | Vulnerable | ASUS |
| cpe:2.3:h:asus:rs720a-e9-rs12v2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:o:asus:rs720a-e9-rs24v2_firmware:1.15.1:*:*:*:*:*:*:* | 1.15.1 | Vulnerable | ASUS |
| cpe:2.3:h:asus:rs720a-e9-rs24v2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:o:asus:z11pr-d16_firmware:1.15.3:*:*:*:*:*:*:* | 1.15.3 | Vulnerable | ASUS |
| cpe:2.3:h:asus:z11pr-d16:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
- cpe:2.3:o:asus:rs700-e9-rs12_firmware:1.11.5:*:*:*:*:*:*:* Versions 1.11.5 Vulnerable ·ASUS
- cpe:2.3:h:asus:rs700-e9-rs12:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:o:asus:rs100-e10-pi2_firmware:1.13.6:*:*:*:*:*:*:* Versions 1.13.6 Vulnerable ·ASUS
- cpe:2.3:h:asus:rs100-e10-pi2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:o:asus:rs300-e10-ps4_firmware:1.13.6:*:*:*:*:*:*:* Versions 1.13.6 Vulnerable ·ASUS
- cpe:2.3:h:asus:rs300-e10-ps4:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:o:asus:rs300-e10-rs4_firmware:1.13.6:*:*:*:*:*:*:* Versions 1.13.6 Vulnerable ·ASUS
- cpe:2.3:h:asus:rs300-e10-rs4:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:o:asus:rs500a-e9-ps4_firmware:1.14.1:*:*:*:*:*:*:* Versions 1.14.1 Vulnerable ·ASUS
- cpe:2.3:h:asus:rs500a-e9-ps4:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:o:asus:rs500a-e9-rs4_firmware:1.14.1:*:*:*:*:*:*:* Versions 1.14.1 Vulnerable ·ASUS
- cpe:2.3:h:asus:rs500a-e9-rs4:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:o:asus:rs500a-e9_rs4_u_firmware:1.14.1:*:*:*:*:*:*:* Versions 1.14.1 Vulnerable ·ASUS
- cpe:2.3:h:asus:rs500a-e9_rs4_u:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:o:asus:e700_g4_firmware:1.14.1:*:*:*:*:*:*:* Versions 1.14.1 Vulnerable ·ASUS
- cpe:2.3:h:asus:e700_g4:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:o:asus:ws_c422_pro\/se_firmware:1.14.1:*:*:*:*:*:*:* Versions 1.14.1 Vulnerable ·ASUS
- cpe:2.3:h:asus:ws_c422_pro\/se:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:o:asus:ws_x299_pro\/se_firmware:1.14.1:*:*:*:*:*:*:* Versions 1.14.1 Vulnerable ·ASUS
- cpe:2.3:h:asus:ws_x299_pro\/se:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:o:asus:z11pa-u12_firmware:1.15.1:*:*:*:*:*:*:* Versions 1.15.1 Vulnerable ·ASUS
- cpe:2.3:h:asus:z11pa-u12:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:o:asus:z11pa-u12\/10g-2s_firmware:1.15.1:*:*:*:*:*:*:* Versions 1.15.1 Vulnerable ·ASUS
- cpe:2.3:h:asus:z11pa-u12\/10g-2s:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:o:asus:knpa-u16_firmware:1.13.4:*:*:*:*:*:*:* Versions 1.13.4 Vulnerable ·ASUS
- cpe:2.3:h:asus:knpa-u16:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:o:asus:esc4000_dhd_g4_firmware:1.13.7:*:*:*:*:*:*:* Versions 1.13.7 Vulnerable ·ASUS
- cpe:2.3:h:asus:esc4000_dhd_g4:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:o:asus:esc4000_g4_firmware:1.15.2:*:*:*:*:*:*:* Versions 1.15.2 Vulnerable ·ASUS
- cpe:2.3:h:asus:esc4000_g4:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:o:asus:rs720q-e9-rs24-s_firmware:1.15.0:*:*:*:*:*:*:* Versions 1.15.0 Vulnerable ·ASUS
- cpe:2.3:h:asus:rs720q-e9-rs24-s:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:o:asus:rs720q-e9-rs8_firmware:1.15.0:*:*:*:*:*:*:* Versions 1.15.0 Vulnerable ·ASUS
- cpe:2.3:h:asus:rs720q-e9-rs8:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:o:asus:rs720q-e9-rs8-s_firmware:1.15.0:*:*:*:*:*:*:* Versions 1.15.0 Vulnerable ·ASUS
- cpe:2.3:h:asus:rs720q-e9-rs8-s:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:o:asus:z11pa-d8_firmware:1.14.1:*:*:*:*:*:*:* Versions 1.14.1 Vulnerable ·ASUS
- cpe:2.3:h:asus:z11pa-d8:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:o:asus:z11pa-d8c_firmware:1.14.1:*:*:*:*:*:*:* Versions 1.14.1 Vulnerable ·ASUS
- cpe:2.3:h:asus:z11pa-d8c:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:o:asus:rs720-e9-rs24-u_firmware:1.14.3:*:*:*:*:*:*:* Versions 1.14.3 Vulnerable ·ASUS
- cpe:2.3:h:asus:rs720-e9-rs24-u:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:o:asus:rs720-e9-rs8-g_firmware:1.15.2:*:*:*:*:*:*:* Versions 1.15.2 Vulnerable ·ASUS
- cpe:2.3:h:asus:rs720-e9-rs8-g:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:o:asus:rs500-e9-ps4_firmware:1.15.4:*:*:*:*:*:*:* Versions 1.15.4 Vulnerable ·ASUS
- cpe:2.3:h:asus:rs500-e9-ps4:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:o:asus:pro_e800_g4_firmware:1.14.2:*:*:*:*:*:*:* Versions 1.14.2 Vulnerable ·ASUS
- cpe:2.3:h:asus:pro_e800_g4:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:o:asus:rs500-e9-rs4_firmware:1.15.4:*:*:*:*:*:*:* Versions 1.15.4 Vulnerable ·ASUS
- cpe:2.3:h:asus:rs500-e9-rs4:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:o:asus:rs500-e9-rs4-u_firmware:1.15.4:*:*:*:*:*:*:* Versions 1.15.4 Vulnerable ·ASUS
- cpe:2.3:h:asus:rs500-e9-rs4-u:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:o:asus:rs520-e9-rs12-e_firmware:1.15.3:*:*:*:*:*:*:* Versions 1.15.3 Vulnerable ·ASUS
- cpe:2.3:h:asus:rs520-e9-rs12-e:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:o:asus:rs520-e9-rs8_firmware:1.15.3:*:*:*:*:*:*:* Versions 1.15.3 Vulnerable ·ASUS
- cpe:2.3:h:asus:rs520-e9-rs8:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:o:asus:esc8000_g4_firmware:1.15.4:*:*:*:*:*:*:* Versions 1.15.4 Vulnerable ·ASUS
- cpe:2.3:h:asus:esc8000_g4:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:o:asus:esc8000_g4\/10g_firmware:1.15.4:*:*:*:*:*:*:* Versions 1.15.4 Vulnerable ·ASUS
- cpe:2.3:h:asus:esc8000_g4\/10g:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:o:asus:rs720-e9-rs12-e_firmware:1.15.2:*:*:*:*:*:*:* Versions 1.15.2 Vulnerable ·ASUS
- cpe:2.3:h:asus:rs720-e9-rs12-e:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:o:asus:ws_c621e_sage_firmware:1.15.1:*:*:*:*:*:*:* Versions 1.15.1 Vulnerable ·ASUS
- cpe:2.3:h:asus:ws_c621e_sage:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:o:asus:rs500a-e10-ps4_firmware:1.15.2:*:*:*:*:*:*:* Versions 1.15.2 Vulnerable ·ASUS
- cpe:2.3:h:asus:rs500a-e10-ps4:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:o:asus:rs500a-e10-rs4_firmware:1.15.2:*:*:*:*:*:*:* Versions 1.15.2 Vulnerable ·ASUS
- cpe:2.3:h:asus:rs500a-e10-rs4:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:o:asus:rs700a-e9-rs12v2_firmware:1.15.1:*:*:*:*:*:*:* Versions 1.15.1 Vulnerable ·ASUS
- cpe:2.3:h:asus:rs700a-e9-rs12v2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:o:asus:rs700a-e9-rs4v2_firmware:1.15.1:*:*:*:*:*:*:* Versions 1.15.1 Vulnerable ·ASUS
- cpe:2.3:h:asus:rs700a-e9-rs4v2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:o:asus:rs720a-e9-rs12v2_firmware:1.15.2:*:*:*:*:*:*:* Versions 1.15.2 Vulnerable ·ASUS
- cpe:2.3:h:asus:rs720a-e9-rs12v2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:o:asus:rs720a-e9-rs24v2_firmware:1.15.1:*:*:*:*:*:*:* Versions 1.15.1 Vulnerable ·ASUS
- cpe:2.3:h:asus:rs720a-e9-rs24v2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:o:asus:z11pr-d16_firmware:1.15.3:*:*:*:*:*:*:* Versions 1.15.3 Vulnerable ·ASUS
- cpe:2.3:h:asus:z11pr-d16:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2021-28191
- 2026-10-03 Alias added: GHSA-3cc3-x3hg-mxrx
References
More ASUS Asmb9-ikvm Firmware vulnerabilities
- TI-2021-09438 ASUS BMC's firmware: path traversal - Delete video file function CVSS 3.1MEDIUM 4.9
- TI-2021-09437 ASUS BMC's firmware: path traversal - Get video file function CVSS 3.1MEDIUM 4.9
- TI-2021-09436 ASUS BMC's firmware: path traversal - Get Help file function CVSS 3.1MEDIUM 4.9
- TI-2021-09435 ASUS BMC's firmware: path traversal - Record video file function CVSS 3.1MEDIUM 4.9
- TI-2021-09431 ASUS BMC's firmware: buffer overflow - Service configuration-2 function CVSS 3.1MEDIUM 4.9
- TI-2021-09430 ASUS BMC's firmware: buffer overflow - Service configuration-1 function CVSS 3.1MEDIUM 4.9
Sources
- CVE-2021-28191 · CVE Program
- CVE-2021-28191 · NVD
- FIRST EPSS
- GHSA-3cc3-x3hg-mxrx · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences