Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

17 records

Priority LOW 26

The specific function in ASUS BMC’s firmware Web management page (Delete video file function) does not filter the specific parameter.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.0197 Published 2021-04-06 No fix listed CWE-22
Priority LOW 26

The specific function in ASUS BMC’s firmware Web management page (Get video file function) does not filter the specific parameter.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.0197 Published 2021-04-06 No fix listed CWE-22
Priority LOW 26

The specific function in ASUS BMC’s firmware Web management page (Get Help file function) does not filter the specific parameter.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.0197 Published 2021-04-06 No fix listed CWE-22
Priority LOW 26

The specific function in ASUS BMC’s firmware Web management page (Record video file function) does not filter the specific parameter.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.0197 Published 2021-04-06 No fix listed CWE-22
Priority LOW 26

The Service configuration-2 function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01874 Published 2021-04-06 No fix listed CWE-120
Priority LOW 26

The Service configuration-1 function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01874 Published 2021-04-06 No fix listed CWE-120
Priority LOW 26

The CD media configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01874 Published 2021-04-06 No fix listed CWE-120
Priority LOW 26

The specific function in ASUS BMC’s firmware Web management page (Modify user’s information function) does not verify the string length entered by users, resulting in a Buffer overflow vulnerability.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01874 Published 2021-04-06 No fix listed CWE-120
Priority LOW 26

The Firmware protocol configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01874 Published 2021-04-06 No fix listed CWE-120
Priority LOW 26

The Active Directory configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01874 Published 2021-04-06 No fix listed CWE-120
Priority LOW 25

The specific function in ASUS BMC’s firmware Web management page (Generate SSL certificate function) does not verify the string length entered by users, resulting in a Buffer overflow vulnerability.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01142 Published 2021-04-06 No fix listed CWE-120
Priority LOW 26

The Radius configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01874 Published 2021-04-06 No fix listed CWE-120
Priority LOW 26

The specific function in ASUS BMC’s firmware Web management page (Remote image configuration setting) does not verify the string length entered by users, resulting in a Buffer overflow vulnerability.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01874 Published 2021-04-06 No fix listed CWE-120
Priority LOW 26

The SMTP configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01874 Published 2021-04-06 No fix listed CWE-120
Priority LOW 26

The specific function in ASUS BMC’s firmware Web management page (Remote video storage function) does not verify the string length entered by users, resulting in a Buffer overflow vulnerability.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01874 Published 2021-04-06 No fix listed CWE-120
Priority LOW 26

The Firmware update function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01874 Published 2021-04-06 No fix listed CWE-120
Priority LOW 25

The specific function in ASUS BMC’s firmware Web management page (Generate new certificate function) does not verify the string length entered by users, resulting in a Buffer overflow vulnerability.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01142 Published 2021-04-06 No fix listed CWE-120