Description
The Service configuration-1 function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
ASUS BMC firmware for ASMB9-iKVM
1.11.12affected
ASUS BMC firmware for RS720A-E9-RS24-E
1.10.3affected
ASUS BMC firmware for RS700A-E9-RS4
1.10.0affected
ASUS BMC firmware for RS700-E9-RS4
1.09affected
ASUS BMC firmware for ESC4000 G4X
1.11.6affected
ASUS BMC firmware for RS700-E9-RS12
1.11.5affected
ASUS BMC firmware for RS100-E10-PI2
1.13.6affected
ASUS BMC firmware for RS300-E10-PS4
1.13.6affected
ASUS BMC firmware for RS300-E10-RS4
1.13.6affected
ASUS BMC firmware for RS500A-E9-PS4
1.14.1affected
ASUS BMC firmware for RS500A-E9-RS4
1.14.1affected
ASUS BMC firmware for RS500A-E9 RS4
1.14.1affected
ASUS BMC firmware for E700 G4
1.14.1affected
ASUS BMC firmware for WS C422 PRO/SE
1.14.1affected
ASUS BMC firmware for WS X299 PRO/SE
1.14.1affected
ASUS BMC firmware for Z11PA-U12
1.15.1affected
ASUS BMC firmware for Z11PA-U12/10G-2S
1.15.1affected
ASUS BMC firmware for KNPA-U16
1.13.4affected
ASUS BMC firmware for ESC4000 DHD G4
1.13.7affected
ASUS BMC firmware for ESC4000 G4
1.15.2affected
ASUS BMC firmware for RS720Q-E9-RS24-S
1.15.0affected
ASUS BMC firmware for RS720Q-E9-RS8
1.15.0affected
ASUS BMC firmware for RS720Q-E9-RS8-S
1.15.0affected
ASUS BMC firmware for Z11PA-D8
1.14.1affected
ASUS BMC firmware for Z11PA-D8C
1.14.1affected
ASUS BMC firmware for RS720-E9-RS24-U
1.14.3affected
ASUS BMC firmware for RS720-E9-RS8-G
1.15.2affected
ASUS BMC firmware for RS500-E9-PS4
1.15.4affected
ASUS BMC firmware for Pro E800 G4
1.14.2affected
ASUS BMC firmware for RS500-E9-RS4
1.15.4affected
ASUS BMC firmware for RS500-E9-RS4-U
1.15.4affected
ASUS BMC firmware for RS520-E9-RS12-E
1.15.3affected
ASUS BMC firmware for RS520-E9-RS8
1.15.3affected
ASUS BMC firmware for ESC8000 G4
1.15.4affected
ASUS BMC firmware for ESC8000 G4/10G
1.15.4affected
ASUS BMC firmware for RS720-E9-RS12-E
1.15.2affected
ASUS BMC firmware for WS C621E SAGE
1.15.1affected
ASUS BMC firmware for RS500A-E10-PS4
1.15.2affected
ASUS BMC firmware for RS500A-E10-RS4
1.15.2affected
ASUS BMC firmware for RS700A-E9-RS12V2
1.15.1affected
ASUS BMC firmware for RS700A-E9-RS4V2
1.15.1affected
ASUS BMC firmware for RS720A-E9-RS12V2
1.15.2affected
ASUS BMC firmware for RS720A-E9-RS24V2
1.15.1affected
ASUS BMC firmware for Z11PR-D16
1.15.3affected