CVE-2021-28188

More information about this CVE will likely be available in a few days.

Description


The specific function in ASUS BMC’s firmware Web management page (Modify user’s information function) does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.

Related CPE's


Could not find any relations

References




CvssV3 impact


Could not find any metrics

CvssV2 impact


Could not find any metrics