CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-28196

The specific function in ASUS BMC’s firmware Web management page (Generate SSL certificate function) does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.007

EPSS Ranking 69.8%

CVSS Severity

CVSS v3 Score 4.9

CVSS v2 Score 4.0

References

Products affected by CVE-2021-28196

Asus » Asmb9-Ikvm » Version: N/A

cpe:2.3:h:asus:asmb9-ikvm:-
Asus » E700 G4 » Version: N/A

cpe:2.3:h:asus:e700_g4:-
Asus » Esc4000 Dhd G4 » Version: N/A

cpe:2.3:h:asus:esc4000_dhd_g4:-
Asus » Esc4000 G4 » Version: N/A

cpe:2.3:h:asus:esc4000_g4:-
Asus » Esc4000 G4x » Version: N/A

cpe:2.3:h:asus:esc4000_g4x:-
Asus » Esc8000 G4/10g » Version: N/A

cpe:2.3:h:asus:esc8000_g4/10g:-
Asus » Esc8000 G4 » Version: N/A

cpe:2.3:h:asus:esc8000_g4:-
Asus » Knpa-U16 » Version: N/A

cpe:2.3:h:asus:knpa-u16:-
Asus » Pro E800 G4 » Version: N/A

cpe:2.3:h:asus:pro_e800_g4:-
Asus » Rs100-E10-Pi2 » Version: N/A

cpe:2.3:h:asus:rs100-e10-pi2:-
Asus » Rs300-E10-Ps4 » Version: N/A

cpe:2.3:h:asus:rs300-e10-ps4:-
Asus » Rs300-E10-Rs4 » Version: N/A

cpe:2.3:h:asus:rs300-e10-rs4:-
Asus » Rs500-E9-Ps4 » Version: N/A

cpe:2.3:h:asus:rs500-e9-ps4:-
Asus » Rs500-E9-Rs4-U » Version: N/A

cpe:2.3:h:asus:rs500-e9-rs4-u:-
Asus » Rs500-E9-Rs4 » Version: N/A

cpe:2.3:h:asus:rs500-e9-rs4:-
Asus » Rs500a-E10-Ps4 » Version: N/A

cpe:2.3:h:asus:rs500a-e10-ps4:-
Asus » Rs500a-E10-Rs4 » Version: N/A

cpe:2.3:h:asus:rs500a-e10-rs4:-
Asus » Rs500a-E9-Ps4 » Version: N/A

cpe:2.3:h:asus:rs500a-e9-ps4:-
Asus » Rs500a-E9-Rs4 » Version: N/A

cpe:2.3:h:asus:rs500a-e9-rs4:-
Asus » Rs500a-E9 Rs4 U » Version: N/A

cpe:2.3:h:asus:rs500a-e9_rs4_u:-
Asus » Rs520-E9-Rs12-E » Version: N/A

cpe:2.3:h:asus:rs520-e9-rs12-e:-
Asus » Rs520-E9-Rs8 » Version: N/A

cpe:2.3:h:asus:rs520-e9-rs8:-
Asus » Rs700-E9-Rs12 » Version: N/A

cpe:2.3:h:asus:rs700-e9-rs12:-
Asus » Rs700-E9-Rs4 » Version: N/A

cpe:2.3:h:asus:rs700-e9-rs4:-
Asus » Rs700a-E9-Rs12v2 » Version: N/A

cpe:2.3:h:asus:rs700a-e9-rs12v2:-
Asus » Rs700a-E9-Rs4 » Version: N/A

cpe:2.3:h:asus:rs700a-e9-rs4:-
Asus » Rs700a-E9-Rs4v2 » Version: N/A

cpe:2.3:h:asus:rs700a-e9-rs4v2:-
Asus » Rs720-E9-Rs12-E » Version: N/A

cpe:2.3:h:asus:rs720-e9-rs12-e:-
Asus » Rs720-E9-Rs24-U » Version: N/A

cpe:2.3:h:asus:rs720-e9-rs24-u:-
Asus » Rs720-E9-Rs8-G » Version: N/A

cpe:2.3:h:asus:rs720-e9-rs8-g:-
Asus » Rs720a-E9-Rs12v2 » Version: N/A

cpe:2.3:h:asus:rs720a-e9-rs12v2:-
Asus » Rs720a-E9-Rs24-E » Version: N/A

cpe:2.3:h:asus:rs720a-e9-rs24-e:-
Asus » Rs720a-E9-Rs24v2 » Version: N/A

cpe:2.3:h:asus:rs720a-e9-rs24v2:-
Asus » Rs720q-E9-Rs24-S » Version: N/A

cpe:2.3:h:asus:rs720q-e9-rs24-s:-
Asus » Rs720q-E9-Rs8-S » Version: N/A

cpe:2.3:h:asus:rs720q-e9-rs8-s:-
Asus » Rs720q-E9-Rs8 » Version: N/A

cpe:2.3:h:asus:rs720q-e9-rs8:-
Asus » Ws C422 Pro/se » Version: N/A

cpe:2.3:h:asus:ws_c422_pro/se:-
Asus » Ws C621e Sage » Version: N/A

cpe:2.3:h:asus:ws_c621e_sage:-
Asus » Ws X299 Pro/se » Version: N/A

cpe:2.3:h:asus:ws_x299_pro/se:-
Asus » Z11pa-D8 » Version: N/A

cpe:2.3:h:asus:z11pa-d8:-
Asus » Z11pa-D8c » Version: N/A

cpe:2.3:h:asus:z11pa-d8c:-
Asus » Z11pa-U12/10g-2s » Version: N/A

cpe:2.3:h:asus:z11pa-u12/10g-2s:-
Asus » Z11pa-U12 » Version: N/A

cpe:2.3:h:asus:z11pa-u12:-
Asus » Z11pr-D16 » Version: N/A

cpe:2.3:h:asus:z11pr-d16:-
Asus » Asmb9-Ikvm Firmware » Version: 1.11.12

cpe:2.3:o:asus:asmb9-ikvm_firmware:1.11.12
Asus » E700 G4 Firmware » Version: 1.14.1

cpe:2.3:o:asus:e700_g4_firmware:1.14.1
Asus » Esc4000 Dhd G4 Firmware » Version: 1.13.7

cpe:2.3:o:asus:esc4000_dhd_g4_firmware:1.13.7
Asus » Esc4000 G4 Firmware » Version: 1.15.2

cpe:2.3:o:asus:esc4000_g4_firmware:1.15.2
Asus » Esc4000 G4x Firmware » Version: 1.11.6

cpe:2.3:o:asus:esc4000_g4x_firmware:1.11.6
Asus » Esc8000 G4/10g Firmware » Version: 1.15.4

cpe:2.3:o:asus:esc8000_g4/10g_firmware:1.15.4
Asus » Esc8000 G4 Firmware » Version: 1.15.4

cpe:2.3:o:asus:esc8000_g4_firmware:1.15.4
Asus » Knpa-U16 Firmware » Version: 1.13.4

cpe:2.3:o:asus:knpa-u16_firmware:1.13.4
Asus » Pro E800 G4 Firmware » Version: 1.14.2

cpe:2.3:o:asus:pro_e800_g4_firmware:1.14.2
Asus » Rs100-E10-Pi2 Firmware » Version: 1.13.6

cpe:2.3:o:asus:rs100-e10-pi2_firmware:1.13.6
Asus » Rs300-E10-Ps4 Firmware » Version: 1.13.6

cpe:2.3:o:asus:rs300-e10-ps4_firmware:1.13.6
Asus » Rs300-E10-Rs4 Firmware » Version: 1.13.6

cpe:2.3:o:asus:rs300-e10-rs4_firmware:1.13.6
Asus » Rs500-E9-Ps4 Firmware » Version: 1.15.4

cpe:2.3:o:asus:rs500-e9-ps4_firmware:1.15.4
Asus » Rs500-E9-Rs4-U Firmware » Version: 1.15.4

cpe:2.3:o:asus:rs500-e9-rs4-u_firmware:1.15.4
Asus » Rs500-E9-Rs4 Firmware » Version: 1.15.4

cpe:2.3:o:asus:rs500-e9-rs4_firmware:1.15.4
Asus » Rs500a-E10-Ps4 Firmware » Version: 1.15.2

cpe:2.3:o:asus:rs500a-e10-ps4_firmware:1.15.2
Asus » Rs500a-E10-Rs4 Firmware » Version: 1.15.2

cpe:2.3:o:asus:rs500a-e10-rs4_firmware:1.15.2
Asus » Rs500a-E9-Ps4 Firmware » Version: 1.14.1

cpe:2.3:o:asus:rs500a-e9-ps4_firmware:1.14.1
Asus » Rs500a-E9-Rs4 Firmware » Version: 1.14.1

cpe:2.3:o:asus:rs500a-e9-rs4_firmware:1.14.1
Asus » Rs500a-E9 Rs4 U Firmware » Version: 1.14.1

cpe:2.3:o:asus:rs500a-e9_rs4_u_firmware:1.14.1
Asus » Rs520-E9-Rs12-E Firmware » Version: 1.15.3

cpe:2.3:o:asus:rs520-e9-rs12-e_firmware:1.15.3
Asus » Rs520-E9-Rs8 Firmware » Version: 1.15.3

cpe:2.3:o:asus:rs520-e9-rs8_firmware:1.15.3
Asus » Rs700-E9-Rs12 Firmware » Version: 1.11.5

cpe:2.3:o:asus:rs700-e9-rs12_firmware:1.11.5
Asus » Rs700-E9-Rs4 Firmware » Version: 1.09

cpe:2.3:o:asus:rs700-e9-rs4_firmware:1.09
Asus » Rs700a-E9-Rs12v2 Firmware » Version: 1.15.1

cpe:2.3:o:asus:rs700a-e9-rs12v2_firmware:1.15.1
Asus » Rs700a-E9-Rs4 Firmware » Version: 1.10.0

cpe:2.3:o:asus:rs700a-e9-rs4_firmware:1.10.0
Asus » Rs700a-E9-Rs4v2 Firmware » Version: 1.15.1

cpe:2.3:o:asus:rs700a-e9-rs4v2_firmware:1.15.1
Asus » Rs720-E9-Rs12-E Firmware » Version: 1.15.2

cpe:2.3:o:asus:rs720-e9-rs12-e_firmware:1.15.2
Asus » Rs720-E9-Rs24-U Firmware » Version: 1.14.3

cpe:2.3:o:asus:rs720-e9-rs24-u_firmware:1.14.3
Asus » Rs720-E9-Rs8-G Firmware » Version: 1.15.2

cpe:2.3:o:asus:rs720-e9-rs8-g_firmware:1.15.2
Asus » Rs720a-E9-Rs12v2 Firmware » Version: 1.15.2

cpe:2.3:o:asus:rs720a-e9-rs12v2_firmware:1.15.2
Asus » Rs720a-E9-Rs24-E Firmware » Version: 1.10.3

cpe:2.3:o:asus:rs720a-e9-rs24-e_firmware:1.10.3
Asus » Rs720a-E9-Rs24v2 Firmware » Version: 1.15.1

cpe:2.3:o:asus:rs720a-e9-rs24v2_firmware:1.15.1
Asus » Rs720q-E9-Rs24-S Firmware » Version: 1.15.0

cpe:2.3:o:asus:rs720q-e9-rs24-s_firmware:1.15.0
Asus » Rs720q-E9-Rs8-S Firmware » Version: 1.15.0

cpe:2.3:o:asus:rs720q-e9-rs8-s_firmware:1.15.0
Asus » Rs720q-E9-Rs8 Firmware » Version: 1.15.0

cpe:2.3:o:asus:rs720q-e9-rs8_firmware:1.15.0
Asus » Ws C422 Pro/se Firmware » Version: 1.14.1

cpe:2.3:o:asus:ws_c422_pro/se_firmware:1.14.1
Asus » Ws C621e Sage Firmware » Version: 1.15.1

cpe:2.3:o:asus:ws_c621e_sage_firmware:1.15.1
Asus » Ws X299 Pro/se Firmware » Version: 1.14.1

cpe:2.3:o:asus:ws_x299_pro/se_firmware:1.14.1
Asus » Z11pa-D8 Firmware » Version: 1.14.1

cpe:2.3:o:asus:z11pa-d8_firmware:1.14.1
Asus » Z11pa-D8c Firmware » Version: 1.14.1

cpe:2.3:o:asus:z11pa-d8c_firmware:1.14.1
Asus » Z11pa-U12/10g-2s Firmware » Version: 1.15.1

cpe:2.3:o:asus:z11pa-u12/10g-2s_firmware:1.15.1
Asus » Z11pa-U12 Firmware » Version: 1.15.1

cpe:2.3:o:asus:z11pa-u12_firmware:1.15.1
Asus » Z11pr-D16 Firmware » Version: 1.15.3

cpe:2.3:o:asus:z11pr-d16_firmware:1.15.3

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-28196

Products

Pricing

Contact Us