ASUS BMC's firmware: buffer overflow - Remote video storage function
Priority LOW 26CWE-120Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- High
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Denial of service
- Confidentiality · integrity · availability
- None · None · High
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-120 and the CVSS impact.
Summary
The specific function in ASUS BMC’s firmware Web management page (Remote video storage function) does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.
Why it matters now
EPSS 0.01874 79th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| ASUS | BMC firmware for ASMB9-iKVM | 1.11.12 | — | No fix listed | CNA |
| ASUS | BMC firmware for RS720A-E9-RS24-E | 1.10.3 | — | No fix listed | CNA |
| ASUS | BMC firmware for RS700A-E9-RS4 | 1.10.0 | — | No fix listed | CNA |
| ASUS | BMC firmware for RS700-E9-RS4 | 1.09 | — | No fix listed | CNA |
| ASUS | BMC firmware for ESC4000 G4X | 1.11.6 | — | No fix listed | CNA |
| ASUS | BMC firmware for RS700-E9-RS12 | 1.11.5 | — | No fix listed | CNA |
| ASUS | BMC firmware for RS100-E10-PI2 | 1.13.6 | — | No fix listed | CNA |
| ASUS | BMC firmware for RS300-E10-PS4 | 1.13.6 | — | No fix listed | CNA |
| ASUS | BMC firmware for RS300-E10-RS4 | 1.13.6 | — | No fix listed | CNA |
| ASUS | BMC firmware for RS500A-E9-PS4 | 1.14.1 | — | No fix listed | CNA |
| ASUS | BMC firmware for RS500A-E9-RS4 | 1.14.1 | — | No fix listed | CNA |
| ASUS | BMC firmware for RS500A-E9 RS4 | 1.14.1 | — | No fix listed | CNA |
| ASUS | BMC firmware for E700 G4 | 1.14.1 | — | No fix listed | CNA |
| ASUS | BMC firmware for WS C422 PRO/SE | 1.14.1 | — | No fix listed | CNA |
| ASUS | BMC firmware for WS X299 PRO/SE | 1.14.1 | — | No fix listed | CNA |
| ASUS | BMC firmware for Z11PA-U12 | 1.15.1 | — | No fix listed | CNA |
| ASUS | BMC firmware for Z11PA-U12/10G-2S | 1.15.1 | — | No fix listed | CNA |
| ASUS | BMC firmware for KNPA-U16 | 1.13.4 | — | No fix listed | CNA |
| ASUS | BMC firmware for ESC4000 DHD G4 | 1.13.7 | — | No fix listed | CNA |
| ASUS | BMC firmware for ESC4000 G4 | 1.15.2 | — | No fix listed | CNA |
| ASUS | BMC firmware for RS720Q-E9-RS24-S | 1.15.0 | — | No fix listed | CNA |
| ASUS | BMC firmware for RS720Q-E9-RS8 | 1.15.0 | — | No fix listed | CNA |
| ASUS | BMC firmware for RS720Q-E9-RS8-S | 1.15.0 | — | No fix listed | CNA |
| ASUS | BMC firmware for Z11PA-D8 | 1.14.1 | — | No fix listed | CNA |
| ASUS | BMC firmware for Z11PA-D8C | 1.14.1 | — | No fix listed | CNA |
| ASUS | BMC firmware for RS720-E9-RS24-U | 1.14.3 | — | No fix listed | CNA |
| ASUS | BMC firmware for RS720-E9-RS8-G | 1.15.2 | — | No fix listed | CNA |
| ASUS | BMC firmware for RS500-E9-PS4 | 1.15.4 | — | No fix listed | CNA |
| ASUS | BMC firmware for Pro E800 G4 | 1.14.2 | — | No fix listed | CNA |
| ASUS | BMC firmware for RS500-E9-RS4 | 1.15.4 | — | No fix listed | CNA |
| ASUS | BMC firmware for RS500-E9-RS4-U | 1.15.4 | — | No fix listed | CNA |
| ASUS | BMC firmware for RS520-E9-RS12-E | 1.15.3 | — | No fix listed | CNA |
| ASUS | BMC firmware for RS520-E9-RS8 | 1.15.3 | — | No fix listed | CNA |
| ASUS | BMC firmware for ESC8000 G4 | 1.15.4 | — | No fix listed | CNA |
| ASUS | BMC firmware for ESC8000 G4/10G | 1.15.4 | — | No fix listed | CNA |
| ASUS | BMC firmware for RS720-E9-RS12-E | 1.15.2 | — | No fix listed | CNA |
| ASUS | BMC firmware for WS C621E SAGE | 1.15.1 | — | No fix listed | CNA |
| ASUS | BMC firmware for RS500A-E10-PS4 | 1.15.2 | — | No fix listed | CNA |
| ASUS | BMC firmware for RS500A-E10-RS4 | 1.15.2 | — | No fix listed | CNA |
| ASUS | BMC firmware for RS700A-E9-RS12V2 | 1.15.1 | — | No fix listed | CNA |
| ASUS | BMC firmware for RS700A-E9-RS4V2 | 1.15.1 | — | No fix listed | CNA |
| ASUS | BMC firmware for RS720A-E9-RS12V2 | 1.15.2 | — | No fix listed | CNA |
| ASUS | BMC firmware for RS720A-E9-RS24V2 | 1.15.1 | — | No fix listed | CNA |
| ASUS | BMC firmware for Z11PR-D16 | 1.15.3 | — | No fix listed | CNA |
- BMC firmware for ASMB9-iKVM VendorASUS Affected 1.11.12 Fixed in — No fix listed CNA
- BMC firmware for RS720A-E9-RS24-E VendorASUS Affected 1.10.3 Fixed in — No fix listed CNA
- BMC firmware for RS700A-E9-RS4 VendorASUS Affected 1.10.0 Fixed in — No fix listed CNA
- BMC firmware for RS700-E9-RS4 VendorASUS Affected 1.09 Fixed in — No fix listed CNA
- BMC firmware for ESC4000 G4X VendorASUS Affected 1.11.6 Fixed in — No fix listed CNA
- BMC firmware for RS700-E9-RS12 VendorASUS Affected 1.11.5 Fixed in — No fix listed CNA
- BMC firmware for RS100-E10-PI2 VendorASUS Affected 1.13.6 Fixed in — No fix listed CNA
- BMC firmware for RS300-E10-PS4 VendorASUS Affected 1.13.6 Fixed in — No fix listed CNA
- BMC firmware for RS300-E10-RS4 VendorASUS Affected 1.13.6 Fixed in — No fix listed CNA
- BMC firmware for RS500A-E9-PS4 VendorASUS Affected 1.14.1 Fixed in — No fix listed CNA
- BMC firmware for RS500A-E9-RS4 VendorASUS Affected 1.14.1 Fixed in — No fix listed CNA
- BMC firmware for RS500A-E9 RS4 VendorASUS Affected 1.14.1 Fixed in — No fix listed CNA
- BMC firmware for E700 G4 VendorASUS Affected 1.14.1 Fixed in — No fix listed CNA
- BMC firmware for WS C422 PRO/SE VendorASUS Affected 1.14.1 Fixed in — No fix listed CNA
- BMC firmware for WS X299 PRO/SE VendorASUS Affected 1.14.1 Fixed in — No fix listed CNA
- BMC firmware for Z11PA-U12 VendorASUS Affected 1.15.1 Fixed in — No fix listed CNA
- BMC firmware for Z11PA-U12/10G-2S VendorASUS Affected 1.15.1 Fixed in — No fix listed CNA
- BMC firmware for KNPA-U16 VendorASUS Affected 1.13.4 Fixed in — No fix listed CNA
- BMC firmware for ESC4000 DHD G4 VendorASUS Affected 1.13.7 Fixed in — No fix listed CNA
- BMC firmware for ESC4000 G4 VendorASUS Affected 1.15.2 Fixed in — No fix listed CNA
- BMC firmware for RS720Q-E9-RS24-S VendorASUS Affected 1.15.0 Fixed in — No fix listed CNA
- BMC firmware for RS720Q-E9-RS8 VendorASUS Affected 1.15.0 Fixed in — No fix listed CNA
- BMC firmware for RS720Q-E9-RS8-S VendorASUS Affected 1.15.0 Fixed in — No fix listed CNA
- BMC firmware for Z11PA-D8 VendorASUS Affected 1.14.1 Fixed in — No fix listed CNA
- BMC firmware for Z11PA-D8C VendorASUS Affected 1.14.1 Fixed in — No fix listed CNA
- BMC firmware for RS720-E9-RS24-U VendorASUS Affected 1.14.3 Fixed in — No fix listed CNA
- BMC firmware for RS720-E9-RS8-G VendorASUS Affected 1.15.2 Fixed in — No fix listed CNA
- BMC firmware for RS500-E9-PS4 VendorASUS Affected 1.15.4 Fixed in — No fix listed CNA
- BMC firmware for Pro E800 G4 VendorASUS Affected 1.14.2 Fixed in — No fix listed CNA
- BMC firmware for RS500-E9-RS4 VendorASUS Affected 1.15.4 Fixed in — No fix listed CNA
- BMC firmware for RS500-E9-RS4-U VendorASUS Affected 1.15.4 Fixed in — No fix listed CNA
- BMC firmware for RS520-E9-RS12-E VendorASUS Affected 1.15.3 Fixed in — No fix listed CNA
- BMC firmware for RS520-E9-RS8 VendorASUS Affected 1.15.3 Fixed in — No fix listed CNA
- BMC firmware for ESC8000 G4 VendorASUS Affected 1.15.4 Fixed in — No fix listed CNA
- BMC firmware for ESC8000 G4/10G VendorASUS Affected 1.15.4 Fixed in — No fix listed CNA
- BMC firmware for RS720-E9-RS12-E VendorASUS Affected 1.15.2 Fixed in — No fix listed CNA
- BMC firmware for WS C621E SAGE VendorASUS Affected 1.15.1 Fixed in — No fix listed CNA
- BMC firmware for RS500A-E10-PS4 VendorASUS Affected 1.15.2 Fixed in — No fix listed CNA
- BMC firmware for RS500A-E10-RS4 VendorASUS Affected 1.15.2 Fixed in — No fix listed CNA
- BMC firmware for RS700A-E9-RS12V2 VendorASUS Affected 1.15.1 Fixed in — No fix listed CNA
- BMC firmware for RS700A-E9-RS4V2 VendorASUS Affected 1.15.1 Fixed in — No fix listed CNA
- BMC firmware for RS720A-E9-RS12V2 VendorASUS Affected 1.15.2 Fixed in — No fix listed CNA
- BMC firmware for RS720A-E9-RS24V2 VendorASUS Affected 1.15.1 Fixed in — No fix listed CNA
- BMC firmware for Z11PR-D16 VendorASUS Affected 1.15.3 Fixed in — No fix listed CNA
CPE configurations NVD · 88
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:asus:asmb9-ikvm_firmware:1.11.12:*:*:*:*:*:*:* | 1.11.12 | Vulnerable | ASUS |
| cpe:2.3:h:asus:asmb9-ikvm:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:o:asus:rs720a-e9-rs24-e_firmware:1.10.3:*:*:*:*:*:*:* | 1.10.3 | Vulnerable | ASUS |
| cpe:2.3:h:asus:rs720a-e9-rs24-e:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:o:asus:rs700a-e9-rs4_firmware:1.10.0:*:*:*:*:*:*:* | 1.10.0 | Vulnerable | ASUS |
| cpe:2.3:h:asus:rs700a-e9-rs4:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:o:asus:rs700-e9-rs4_firmware:1.09:*:*:*:*:*:*:* | 1.09 | Vulnerable | ASUS |
| cpe:2.3:h:asus:rs700-e9-rs4:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:o:asus:esc4000_g4x_firmware:1.11.6:*:*:*:*:*:*:* | 1.11.6 | Vulnerable | ASUS |
| cpe:2.3:h:asus:esc4000_g4x:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
- cpe:2.3:o:asus:asmb9-ikvm_firmware:1.11.12:*:*:*:*:*:*:* Versions 1.11.12 Vulnerable ·ASUS
- cpe:2.3:h:asus:asmb9-ikvm:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:o:asus:rs720a-e9-rs24-e_firmware:1.10.3:*:*:*:*:*:*:* Versions 1.10.3 Vulnerable ·ASUS
- cpe:2.3:h:asus:rs720a-e9-rs24-e:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:o:asus:rs700a-e9-rs4_firmware:1.10.0:*:*:*:*:*:*:* Versions 1.10.0 Vulnerable ·ASUS
- cpe:2.3:h:asus:rs700a-e9-rs4:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:o:asus:rs700-e9-rs4_firmware:1.09:*:*:*:*:*:*:* Versions 1.09 Vulnerable ·ASUS
- cpe:2.3:h:asus:rs700-e9-rs4:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:o:asus:esc4000_g4x_firmware:1.11.6:*:*:*:*:*:*:* Versions 1.11.6 Vulnerable ·ASUS
- cpe:2.3:h:asus:esc4000_g4x:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
Show 78 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:asus:rs700-e9-rs12_firmware:1.11.5:*:*:*:*:*:*:* | 1.11.5 | Vulnerable | ASUS |
| cpe:2.3:h:asus:rs700-e9-rs12:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:o:asus:rs100-e10-pi2_firmware:1.13.6:*:*:*:*:*:*:* | 1.13.6 | Vulnerable | ASUS |
| cpe:2.3:h:asus:rs100-e10-pi2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:o:asus:rs300-e10-ps4_firmware:1.13.6:*:*:*:*:*:*:* | 1.13.6 | Vulnerable | ASUS |
| cpe:2.3:h:asus:rs300-e10-ps4:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:o:asus:rs300-e10-rs4_firmware:1.13.6:*:*:*:*:*:*:* | 1.13.6 | Vulnerable | ASUS |
| cpe:2.3:h:asus:rs300-e10-rs4:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:o:asus:rs500a-e9-ps4_firmware:1.14.1:*:*:*:*:*:*:* | 1.14.1 | Vulnerable | ASUS |
| cpe:2.3:h:asus:rs500a-e9-ps4:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:o:asus:rs500a-e9-rs4_firmware:1.14.1:*:*:*:*:*:*:* | 1.14.1 | Vulnerable | ASUS |
| cpe:2.3:h:asus:rs500a-e9-rs4:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:o:asus:rs500a-e9_rs4_u_firmware:1.14.1:*:*:*:*:*:*:* | 1.14.1 | Vulnerable | ASUS |
| cpe:2.3:h:asus:rs500a-e9_rs4_u:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:o:asus:e700_g4_firmware:1.14.1:*:*:*:*:*:*:* | 1.14.1 | Vulnerable | ASUS |
| cpe:2.3:h:asus:e700_g4:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:o:asus:ws_c422_pro\/se_firmware:1.14.1:*:*:*:*:*:*:* | 1.14.1 | Vulnerable | ASUS |
| cpe:2.3:h:asus:ws_c422_pro\/se:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:o:asus:ws_x299_pro\/se_firmware:1.14.1:*:*:*:*:*:*:* | 1.14.1 | Vulnerable | ASUS |
| cpe:2.3:h:asus:ws_x299_pro\/se:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:o:asus:z11pa-u12_firmware:1.15.1:*:*:*:*:*:*:* | 1.15.1 | Vulnerable | ASUS |
| cpe:2.3:h:asus:z11pa-u12:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:o:asus:z11pa-u12\/10g-2s_firmware:1.15.1:*:*:*:*:*:*:* | 1.15.1 | Vulnerable | ASUS |
| cpe:2.3:h:asus:z11pa-u12\/10g-2s:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:o:asus:knpa-u16_firmware:1.13.4:*:*:*:*:*:*:* | 1.13.4 | Vulnerable | ASUS |
| cpe:2.3:h:asus:knpa-u16:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:o:asus:esc4000_dhd_g4_firmware:1.13.7:*:*:*:*:*:*:* | 1.13.7 | Vulnerable | ASUS |
| cpe:2.3:h:asus:esc4000_dhd_g4:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:o:asus:esc4000_g4_firmware:1.15.2:*:*:*:*:*:*:* | 1.15.2 | Vulnerable | ASUS |
| cpe:2.3:h:asus:esc4000_g4:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:o:asus:rs720q-e9-rs24-s_firmware:1.15.0:*:*:*:*:*:*:* | 1.15.0 | Vulnerable | ASUS |
| cpe:2.3:h:asus:rs720q-e9-rs24-s:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:o:asus:rs720q-e9-rs8_firmware:1.15.0:*:*:*:*:*:*:* | 1.15.0 | Vulnerable | ASUS |
| cpe:2.3:h:asus:rs720q-e9-rs8:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:o:asus:rs720q-e9-rs8-s_firmware:1.15.0:*:*:*:*:*:*:* | 1.15.0 | Vulnerable | ASUS |
| cpe:2.3:h:asus:rs720q-e9-rs8-s:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:o:asus:z11pa-d8_firmware:1.14.1:*:*:*:*:*:*:* | 1.14.1 | Vulnerable | ASUS |
| cpe:2.3:h:asus:z11pa-d8:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:o:asus:z11pa-d8c_firmware:1.14.1:*:*:*:*:*:*:* | 1.14.1 | Vulnerable | ASUS |
| cpe:2.3:h:asus:z11pa-d8c:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:o:asus:rs720-e9-rs24-u_firmware:1.14.3:*:*:*:*:*:*:* | 1.14.3 | Vulnerable | ASUS |
| cpe:2.3:h:asus:rs720-e9-rs24-u:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:o:asus:rs720-e9-rs8-g_firmware:1.15.2:*:*:*:*:*:*:* | 1.15.2 | Vulnerable | ASUS |
| cpe:2.3:h:asus:rs720-e9-rs8-g:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:o:asus:rs500-e9-ps4_firmware:1.15.4:*:*:*:*:*:*:* | 1.15.4 | Vulnerable | ASUS |
| cpe:2.3:h:asus:rs500-e9-ps4:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:o:asus:pro_e800_g4_firmware:1.14.2:*:*:*:*:*:*:* | 1.14.2 | Vulnerable | ASUS |
| cpe:2.3:h:asus:pro_e800_g4:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:o:asus:rs500-e9-rs4_firmware:1.15.4:*:*:*:*:*:*:* | 1.15.4 | Vulnerable | ASUS |
| cpe:2.3:h:asus:rs500-e9-rs4:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:o:asus:rs500-e9-rs4-u_firmware:1.15.4:*:*:*:*:*:*:* | 1.15.4 | Vulnerable | ASUS |
| cpe:2.3:h:asus:rs500-e9-rs4-u:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:o:asus:rs520-e9-rs12-e_firmware:1.15.3:*:*:*:*:*:*:* | 1.15.3 | Vulnerable | ASUS |
| cpe:2.3:h:asus:rs520-e9-rs12-e:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:o:asus:rs520-e9-rs8_firmware:1.15.3:*:*:*:*:*:*:* | 1.15.3 | Vulnerable | ASUS |
| cpe:2.3:h:asus:rs520-e9-rs8:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:o:asus:esc8000_g4_firmware:1.15.4:*:*:*:*:*:*:* | 1.15.4 | Vulnerable | ASUS |
| cpe:2.3:h:asus:esc8000_g4:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:o:asus:esc8000_g4\/10g_firmware:1.15.4:*:*:*:*:*:*:* | 1.15.4 | Vulnerable | ASUS |
| cpe:2.3:h:asus:esc8000_g4\/10g:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:o:asus:rs720-e9-rs12-e_firmware:1.15.2:*:*:*:*:*:*:* | 1.15.2 | Vulnerable | ASUS |
| cpe:2.3:h:asus:rs720-e9-rs12-e:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:o:asus:ws_c621e_sage_firmware:1.15.1:*:*:*:*:*:*:* | 1.15.1 | Vulnerable | ASUS |
| cpe:2.3:h:asus:ws_c621e_sage:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:o:asus:rs500a-e10-ps4_firmware:1.15.2:*:*:*:*:*:*:* | 1.15.2 | Vulnerable | ASUS |
| cpe:2.3:h:asus:rs500a-e10-ps4:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:o:asus:rs500a-e10-rs4_firmware:1.15.2:*:*:*:*:*:*:* | 1.15.2 | Vulnerable | ASUS |
| cpe:2.3:h:asus:rs500a-e10-rs4:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:o:asus:rs700a-e9-rs12v2_firmware:1.15.1:*:*:*:*:*:*:* | 1.15.1 | Vulnerable | ASUS |
| cpe:2.3:h:asus:rs700a-e9-rs12v2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:o:asus:rs700a-e9-rs4v2_firmware:1.15.1:*:*:*:*:*:*:* | 1.15.1 | Vulnerable | ASUS |
| cpe:2.3:h:asus:rs700a-e9-rs4v2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:o:asus:rs720a-e9-rs12v2_firmware:1.15.2:*:*:*:*:*:*:* | 1.15.2 | Vulnerable | ASUS |
| cpe:2.3:h:asus:rs720a-e9-rs12v2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:o:asus:rs720a-e9-rs24v2_firmware:1.15.1:*:*:*:*:*:*:* | 1.15.1 | Vulnerable | ASUS |
| cpe:2.3:h:asus:rs720a-e9-rs24v2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:o:asus:z11pr-d16_firmware:1.15.3:*:*:*:*:*:*:* | 1.15.3 | Vulnerable | ASUS |
| cpe:2.3:h:asus:z11pr-d16:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
- cpe:2.3:o:asus:rs700-e9-rs12_firmware:1.11.5:*:*:*:*:*:*:* Versions 1.11.5 Vulnerable ·ASUS
- cpe:2.3:h:asus:rs700-e9-rs12:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:o:asus:rs100-e10-pi2_firmware:1.13.6:*:*:*:*:*:*:* Versions 1.13.6 Vulnerable ·ASUS
- cpe:2.3:h:asus:rs100-e10-pi2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:o:asus:rs300-e10-ps4_firmware:1.13.6:*:*:*:*:*:*:* Versions 1.13.6 Vulnerable ·ASUS
- cpe:2.3:h:asus:rs300-e10-ps4:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:o:asus:rs300-e10-rs4_firmware:1.13.6:*:*:*:*:*:*:* Versions 1.13.6 Vulnerable ·ASUS
- cpe:2.3:h:asus:rs300-e10-rs4:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:o:asus:rs500a-e9-ps4_firmware:1.14.1:*:*:*:*:*:*:* Versions 1.14.1 Vulnerable ·ASUS
- cpe:2.3:h:asus:rs500a-e9-ps4:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:o:asus:rs500a-e9-rs4_firmware:1.14.1:*:*:*:*:*:*:* Versions 1.14.1 Vulnerable ·ASUS
- cpe:2.3:h:asus:rs500a-e9-rs4:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:o:asus:rs500a-e9_rs4_u_firmware:1.14.1:*:*:*:*:*:*:* Versions 1.14.1 Vulnerable ·ASUS
- cpe:2.3:h:asus:rs500a-e9_rs4_u:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:o:asus:e700_g4_firmware:1.14.1:*:*:*:*:*:*:* Versions 1.14.1 Vulnerable ·ASUS
- cpe:2.3:h:asus:e700_g4:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:o:asus:ws_c422_pro\/se_firmware:1.14.1:*:*:*:*:*:*:* Versions 1.14.1 Vulnerable ·ASUS
- cpe:2.3:h:asus:ws_c422_pro\/se:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:o:asus:ws_x299_pro\/se_firmware:1.14.1:*:*:*:*:*:*:* Versions 1.14.1 Vulnerable ·ASUS
- cpe:2.3:h:asus:ws_x299_pro\/se:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:o:asus:z11pa-u12_firmware:1.15.1:*:*:*:*:*:*:* Versions 1.15.1 Vulnerable ·ASUS
- cpe:2.3:h:asus:z11pa-u12:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:o:asus:z11pa-u12\/10g-2s_firmware:1.15.1:*:*:*:*:*:*:* Versions 1.15.1 Vulnerable ·ASUS
- cpe:2.3:h:asus:z11pa-u12\/10g-2s:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:o:asus:knpa-u16_firmware:1.13.4:*:*:*:*:*:*:* Versions 1.13.4 Vulnerable ·ASUS
- cpe:2.3:h:asus:knpa-u16:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:o:asus:esc4000_dhd_g4_firmware:1.13.7:*:*:*:*:*:*:* Versions 1.13.7 Vulnerable ·ASUS
- cpe:2.3:h:asus:esc4000_dhd_g4:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:o:asus:esc4000_g4_firmware:1.15.2:*:*:*:*:*:*:* Versions 1.15.2 Vulnerable ·ASUS
- cpe:2.3:h:asus:esc4000_g4:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:o:asus:rs720q-e9-rs24-s_firmware:1.15.0:*:*:*:*:*:*:* Versions 1.15.0 Vulnerable ·ASUS
- cpe:2.3:h:asus:rs720q-e9-rs24-s:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:o:asus:rs720q-e9-rs8_firmware:1.15.0:*:*:*:*:*:*:* Versions 1.15.0 Vulnerable ·ASUS
- cpe:2.3:h:asus:rs720q-e9-rs8:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:o:asus:rs720q-e9-rs8-s_firmware:1.15.0:*:*:*:*:*:*:* Versions 1.15.0 Vulnerable ·ASUS
- cpe:2.3:h:asus:rs720q-e9-rs8-s:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:o:asus:z11pa-d8_firmware:1.14.1:*:*:*:*:*:*:* Versions 1.14.1 Vulnerable ·ASUS
- cpe:2.3:h:asus:z11pa-d8:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:o:asus:z11pa-d8c_firmware:1.14.1:*:*:*:*:*:*:* Versions 1.14.1 Vulnerable ·ASUS
- cpe:2.3:h:asus:z11pa-d8c:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:o:asus:rs720-e9-rs24-u_firmware:1.14.3:*:*:*:*:*:*:* Versions 1.14.3 Vulnerable ·ASUS
- cpe:2.3:h:asus:rs720-e9-rs24-u:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:o:asus:rs720-e9-rs8-g_firmware:1.15.2:*:*:*:*:*:*:* Versions 1.15.2 Vulnerable ·ASUS
- cpe:2.3:h:asus:rs720-e9-rs8-g:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:o:asus:rs500-e9-ps4_firmware:1.15.4:*:*:*:*:*:*:* Versions 1.15.4 Vulnerable ·ASUS
- cpe:2.3:h:asus:rs500-e9-ps4:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:o:asus:pro_e800_g4_firmware:1.14.2:*:*:*:*:*:*:* Versions 1.14.2 Vulnerable ·ASUS
- cpe:2.3:h:asus:pro_e800_g4:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:o:asus:rs500-e9-rs4_firmware:1.15.4:*:*:*:*:*:*:* Versions 1.15.4 Vulnerable ·ASUS
- cpe:2.3:h:asus:rs500-e9-rs4:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:o:asus:rs500-e9-rs4-u_firmware:1.15.4:*:*:*:*:*:*:* Versions 1.15.4 Vulnerable ·ASUS
- cpe:2.3:h:asus:rs500-e9-rs4-u:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:o:asus:rs520-e9-rs12-e_firmware:1.15.3:*:*:*:*:*:*:* Versions 1.15.3 Vulnerable ·ASUS
- cpe:2.3:h:asus:rs520-e9-rs12-e:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:o:asus:rs520-e9-rs8_firmware:1.15.3:*:*:*:*:*:*:* Versions 1.15.3 Vulnerable ·ASUS
- cpe:2.3:h:asus:rs520-e9-rs8:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:o:asus:esc8000_g4_firmware:1.15.4:*:*:*:*:*:*:* Versions 1.15.4 Vulnerable ·ASUS
- cpe:2.3:h:asus:esc8000_g4:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:o:asus:esc8000_g4\/10g_firmware:1.15.4:*:*:*:*:*:*:* Versions 1.15.4 Vulnerable ·ASUS
- cpe:2.3:h:asus:esc8000_g4\/10g:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:o:asus:rs720-e9-rs12-e_firmware:1.15.2:*:*:*:*:*:*:* Versions 1.15.2 Vulnerable ·ASUS
- cpe:2.3:h:asus:rs720-e9-rs12-e:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:o:asus:ws_c621e_sage_firmware:1.15.1:*:*:*:*:*:*:* Versions 1.15.1 Vulnerable ·ASUS
- cpe:2.3:h:asus:ws_c621e_sage:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:o:asus:rs500a-e10-ps4_firmware:1.15.2:*:*:*:*:*:*:* Versions 1.15.2 Vulnerable ·ASUS
- cpe:2.3:h:asus:rs500a-e10-ps4:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:o:asus:rs500a-e10-rs4_firmware:1.15.2:*:*:*:*:*:*:* Versions 1.15.2 Vulnerable ·ASUS
- cpe:2.3:h:asus:rs500a-e10-rs4:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:o:asus:rs700a-e9-rs12v2_firmware:1.15.1:*:*:*:*:*:*:* Versions 1.15.1 Vulnerable ·ASUS
- cpe:2.3:h:asus:rs700a-e9-rs12v2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:o:asus:rs700a-e9-rs4v2_firmware:1.15.1:*:*:*:*:*:*:* Versions 1.15.1 Vulnerable ·ASUS
- cpe:2.3:h:asus:rs700a-e9-rs4v2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:o:asus:rs720a-e9-rs12v2_firmware:1.15.2:*:*:*:*:*:*:* Versions 1.15.2 Vulnerable ·ASUS
- cpe:2.3:h:asus:rs720a-e9-rs12v2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:o:asus:rs720a-e9-rs24v2_firmware:1.15.1:*:*:*:*:*:*:* Versions 1.15.1 Vulnerable ·ASUS
- cpe:2.3:h:asus:rs720a-e9-rs24v2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:o:asus:z11pr-d16_firmware:1.15.3:*:*:*:*:*:*:* Versions 1.15.3 Vulnerable ·ASUS
- cpe:2.3:h:asus:z11pr-d16:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2021-28192
- 2026-10-03 Alias added: GHSA-fc9c-chwq-c97j
References
More ASUS Asmb9-ikvm Firmware vulnerabilities
- TI-2021-09438 ASUS BMC's firmware: path traversal - Delete video file function CVSS 3.1MEDIUM 4.9
- TI-2021-09437 ASUS BMC's firmware: path traversal - Get video file function CVSS 3.1MEDIUM 4.9
- TI-2021-09436 ASUS BMC's firmware: path traversal - Get Help file function CVSS 3.1MEDIUM 4.9
- TI-2021-09435 ASUS BMC's firmware: path traversal - Record video file function CVSS 3.1MEDIUM 4.9
- TI-2021-09431 ASUS BMC's firmware: buffer overflow - Service configuration-2 function CVSS 3.1MEDIUM 4.9
- TI-2021-09430 ASUS BMC's firmware: buffer overflow - Service configuration-1 function CVSS 3.1MEDIUM 4.9
Sources
- CVE-2021-28192 · CVE Program
- CVE-2021-28192 · NVD
- FIRST EPSS
- GHSA-fc9c-chwq-c97j · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences