CVE-2021-28190

MediumCVSS 4.9/10Last modified Jun 17, 2026

Description

The specific function in ASUS BMC’s firmware Web management page (Generate new certificate function) does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.

Metrics

CVSS 3.1 4.9/10CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-120

Affected software

VendorProductVersions
ASUSBMC firmware for ASMB9-iKVM1.11.12
ASUSBMC firmware for RS720A-E9-RS24-E1.10.3
ASUSBMC firmware for RS700A-E9-RS41.10.0
ASUSBMC firmware for RS700-E9-RS41.09
ASUSBMC firmware for ESC4000 G4X1.11.6
ASUSBMC firmware for RS700-E9-RS121.11.5
ASUSBMC firmware for RS100-E10-PI21.13.6
ASUSBMC firmware for RS300-E10-PS41.13.6
ASUSBMC firmware for RS300-E10-RS41.13.6
ASUSBMC firmware for RS500A-E9-PS41.14.1
ASUSBMC firmware for RS500A-E9-RS41.14.1
ASUSBMC firmware for RS500A-E9 RS41.14.1
ASUSBMC firmware for E700 G41.14.1
ASUSBMC firmware for WS C422 PRO/SE1.14.1
ASUSBMC firmware for WS X299 PRO/SE1.14.1
ASUSBMC firmware for Z11PA-U121.15.1
ASUSBMC firmware for Z11PA-U12/10G-2S1.15.1
ASUSBMC firmware for KNPA-U161.13.4
ASUSBMC firmware for ESC4000 DHD G41.13.7
ASUSBMC firmware for ESC4000 G41.15.2
ASUSBMC firmware for RS720Q-E9-RS24-S1.15.0
ASUSBMC firmware for RS720Q-E9-RS81.15.0
ASUSBMC firmware for RS720Q-E9-RS8-S1.15.0
ASUSBMC firmware for Z11PA-D81.14.1
ASUSBMC firmware for Z11PA-D8C1.14.1
ASUSBMC firmware for RS720-E9-RS24-U1.14.3
ASUSBMC firmware for RS720-E9-RS8-G1.15.2
ASUSBMC firmware for RS500-E9-PS41.15.4
ASUSBMC firmware for Pro E800 G41.14.2
ASUSBMC firmware for RS500-E9-RS41.15.4
ASUSBMC firmware for RS500-E9-RS4-U1.15.4
ASUSBMC firmware for RS520-E9-RS12-E1.15.3
ASUSBMC firmware for RS520-E9-RS81.15.3
ASUSBMC firmware for ESC8000 G41.15.4
ASUSBMC firmware for ESC8000 G4/10G1.15.4
ASUSBMC firmware for RS720-E9-RS12-E1.15.2
ASUSBMC firmware for WS C621E SAGE1.15.1
ASUSBMC firmware for RS500A-E10-PS41.15.2
ASUSBMC firmware for RS500A-E10-RS41.15.2
ASUSBMC firmware for RS700A-E9-RS12V21.15.1
ASUSBMC firmware for RS700A-E9-RS4V21.15.1
ASUSBMC firmware for RS720A-E9-RS12V21.15.2
ASUSBMC firmware for RS720A-E9-RS24V21.15.1
ASUSBMC firmware for Z11PR-D161.15.3

References

Timeline

Published
Apr 6, 2021
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-281914.9The Firmware update function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a BCVE-2021-281924.9The specific function in ASUS BMC’s firmware Web management page (Remote video storage function) does not verify the string length entered bCVE-2021-281934.9The SMTP configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in CVE-2021-281944.9The specific function in ASUS BMC’s firmware Web management page (Remote image configuration setting) does not verify the string length enteCVE-2021-281954.9The Radius configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting iCVE-2021-281964.9The specific function in ASUS BMC’s firmware Web management page (Generate SSL certificate function) does not verify the string length enterCVE-2021-281974.9The Active Directory configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, rCVE-2021-281984.9The Firmware protocol configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, CVE-2021-281994.9The specific function in ASUS BMC’s firmware Web management page (Modify user’s information function) does not verify the string length enteCVE-2021-282004.9The CD media configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resultingCVE-2021-282014.9The Service configuration-1 function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resultinCVE-2021-282024.9The Service configuration-2 function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resultin
CVE-2021-28190: Medium severity, CVSS 4.9 | Vulnix