Asus Asmb8-Ikvm
18 CVEs affecting Asus Asmb8-Ikvm. Latest disclosed: 2021-04-06. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-28204 | High | 7.2 | 2021-04-06 | The specific function in ASUS BMC’s firmware Web management page (Modify user’s information function) does not filter the specific parameter. As obtaining the… |
CVE-2021-28203 | High | 7.2 | 2021-04-06 | The Web Set Media Image function in ASUS BMC’s firmware Web management page does not filter the specific parameter. As obtaining the administrator permission… |
CVE-2021-28205 | Medium | 4.9 | 2021-04-06 | The specific function in ASUS BMC’s firmware Web management page (Delete SOL video file function) does not filter the specific parameter. As obtaining the admi… |
CVE-2021-28189 | Medium | 4.9 | 2021-04-06 | The SMTP configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow v… |
CVE-2021-28188 | Medium | 4.9 | 2021-04-06 | The specific function in ASUS BMC’s firmware Web management page (Modify user’s information function) does not verify the string length entered by users, resul… |
CVE-2021-28187 | Medium | 4.9 | 2021-04-06 | The specific function in ASUS BMC’s firmware Web management page (Generate new SSL certificate) does not verify the string length entered by users, resulting i… |
CVE-2021-28186 | Medium | 4.9 | 2021-04-06 | The specific function in ASUS BMC’s firmware Web management page (ActiveX configuration-2 acquisition) does not verify the string length entered by users, resu… |
CVE-2021-28185 | Medium | 4.9 | 2021-04-06 | The specific function in ASUS BMC’s firmware Web management page (ActiveX configuration-1 acquisition) does not verify the string length entered by users, resu… |
CVE-2021-28184 | Medium | 4.9 | 2021-04-06 | The Active Directory configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffe… |
CVE-2021-28183 | Medium | 4.9 | 2021-04-06 | The specific function in ASUS BMC’s firmware Web management page (Web License configuration setting) does not verify the string length entered by users, result… |
CVE-2021-28182 | Medium | 4.9 | 2021-04-06 | The Web Service configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer ove… |
CVE-2021-28181 | Medium | 4.9 | 2021-04-06 | The specific function in ASUS BMC’s firmware Web management page (Remote video configuration setting) does not verify the string length entered by users, resul… |
CVE-2021-28180 | Medium | 4.9 | 2021-04-06 | The specific function in ASUS BMC’s firmware Web management page (Audit log configuration setting) does not verify the string length entered by users, resultin… |
CVE-2021-28179 | Medium | 4.9 | 2021-04-06 | The specific function in ASUS BMC’s firmware Web management page (Media support configuration setting) does not verify the string length entered by users, resu… |
CVE-2021-28178 | Medium | 4.9 | 2021-04-06 | The UEFI configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow v… |
CVE-2021-28177 | Medium | 4.9 | 2021-04-06 | The LDAP configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow v… |
CVE-2021-28176 | Medium | 4.9 | 2021-04-06 | The DNS configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vu… |
CVE-2021-28175 | Medium | 4.9 | 2021-04-06 | The Radius configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow… |