{"id":"CVE-2021-28201","aliases":["EUVD-2021-14891","GHSA-v9f6-cwjv-332v"],"status":"published","title":"ASUS BMC's firmware: buffer overflow - Service configuration-1 function","description":"The Service configuration-1 function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.","severity":{"version":"3.1","score":4.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.01874,"percentile":0.79539,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-120"],"published":"2021-04-06T05:02:19Z","modified":"2026-06-17T03:46:02Z","products":[{"vendor":"asus","product":"asmb9-ikvm_firmware"},{"vendor":"asus","product":"bmc firmware for asmb9-ikvm"},{"vendor":"asus","product":"bmc firmware for e700 g4"},{"vendor":"asus","product":"bmc firmware for esc4000 dhd g4"},{"vendor":"asus","product":"bmc firmware for esc4000 g4"},{"vendor":"asus","product":"bmc firmware for esc4000 g4x"},{"vendor":"asus","product":"bmc firmware for esc8000 g4"},{"vendor":"asus","product":"bmc firmware for esc8000 g4/10g"},{"vendor":"asus","product":"bmc firmware for knpa-u16"},{"vendor":"asus","product":"bmc firmware for pro e800 g4"},{"vendor":"asus","product":"bmc firmware for rs100-e10-pi2"},{"vendor":"asus","product":"bmc firmware for rs300-e10-ps4"},{"vendor":"asus","product":"bmc firmware for rs300-e10-rs4"},{"vendor":"asus","product":"bmc firmware for rs500-e9-ps4"},{"vendor":"asus","product":"bmc firmware for rs500-e9-rs4"},{"vendor":"asus","product":"bmc firmware for rs500-e9-rs4-u"},{"vendor":"asus","product":"bmc firmware for rs500a-e10-ps4"},{"vendor":"asus","product":"bmc firmware for rs500a-e10-rs4"},{"vendor":"asus","product":"bmc firmware for rs500a-e9 rs4"},{"vendor":"asus","product":"bmc firmware for rs500a-e9-ps4"},{"vendor":"asus","product":"bmc firmware for rs500a-e9-rs4"},{"vendor":"asus","product":"bmc firmware for rs520-e9-rs12-e"},{"vendor":"asus","product":"bmc firmware for rs520-e9-rs8"},{"vendor":"asus","product":"bmc firmware for rs700-e9-rs12"},{"vendor":"asus","product":"bmc firmware for rs700-e9-rs4"},{"vendor":"asus","product":"bmc firmware for rs700a-e9-rs12v2"},{"vendor":"asus","product":"bmc firmware for rs700a-e9-rs4"},{"vendor":"asus","product":"bmc firmware for rs700a-e9-rs4v2"},{"vendor":"asus","product":"bmc firmware for rs720-e9-rs12-e"},{"vendor":"asus","product":"bmc firmware for rs720-e9-rs24-u"},{"vendor":"asus","product":"bmc firmware for rs720-e9-rs8-g"},{"vendor":"asus","product":"bmc firmware for rs720a-e9-rs12v2"},{"vendor":"asus","product":"bmc firmware for rs720a-e9-rs24-e"},{"vendor":"asus","product":"bmc firmware for rs720a-e9-rs24v2"},{"vendor":"asus","product":"bmc firmware for rs720q-e9-rs24-s"},{"vendor":"asus","product":"bmc firmware for rs720q-e9-rs8"},{"vendor":"asus","product":"bmc firmware for rs720q-e9-rs8-s"},{"vendor":"asus","product":"bmc firmware for ws c422 pro/se"},{"vendor":"asus","product":"bmc firmware for ws c621e sage"},{"vendor":"asus","product":"bmc firmware for ws x299 pro/se"},{"vendor":"asus","product":"bmc firmware for z11pa-d8"},{"vendor":"asus","product":"bmc firmware for z11pa-d8c"},{"vendor":"asus","product":"bmc firmware for z11pa-u12"},{"vendor":"asus","product":"bmc firmware for z11pa-u12/10g-2s"},{"vendor":"asus","product":"bmc firmware for z11pr-d16"},{"vendor":"asus","product":"e700_g4_firmware"},{"vendor":"asus","product":"esc4000_dhd_g4_firmware"},{"vendor":"asus","product":"esc4000_g4_firmware"},{"vendor":"asus","product":"esc4000_g4x_firmware"},{"vendor":"asus","product":"esc8000_g4\\/10g_firmware"},{"vendor":"asus","product":"esc8000_g4_firmware"},{"vendor":"asus","product":"knpa-u16_firmware"},{"vendor":"asus","product":"pro_e800_g4_firmware"},{"vendor":"asus","product":"rs100-e10-pi2_firmware"},{"vendor":"asus","product":"rs300-e10-ps4_firmware"},{"vendor":"asus","product":"rs300-e10-rs4_firmware"},{"vendor":"asus","product":"rs500-e9-ps4_firmware"},{"vendor":"asus","product":"rs500-e9-rs4-u_firmware"},{"vendor":"asus","product":"rs500-e9-rs4_firmware"},{"vendor":"asus","product":"rs500a-e10-ps4_firmware"},{"vendor":"asus","product":"rs500a-e10-rs4_firmware"},{"vendor":"asus","product":"rs500a-e9-ps4_firmware"},{"vendor":"asus","product":"rs500a-e9-rs4_firmware"},{"vendor":"asus","product":"rs500a-e9_rs4_u_firmware"},{"vendor":"asus","product":"rs520-e9-rs12-e_firmware"},{"vendor":"asus","product":"rs520-e9-rs8_firmware"},{"vendor":"asus","product":"rs700-e9-rs12_firmware"},{"vendor":"asus","product":"rs700-e9-rs4_firmware"},{"vendor":"asus","product":"rs700a-e9-rs12v2_firmware"},{"vendor":"asus","product":"rs700a-e9-rs4_firmware"},{"vendor":"asus","product":"rs700a-e9-rs4v2_firmware"},{"vendor":"asus","product":"rs720-e9-rs12-e_firmware"},{"vendor":"asus","product":"rs720-e9-rs24-u_firmware"},{"vendor":"asus","product":"rs720-e9-rs8-g_firmware"},{"vendor":"asus","product":"rs720a-e9-rs12v2_firmware"},{"vendor":"asus","product":"rs720a-e9-rs24-e_firmware"},{"vendor":"asus","product":"rs720a-e9-rs24v2_firmware"},{"vendor":"asus","product":"rs720q-e9-rs24-s_firmware"},{"vendor":"asus","product":"rs720q-e9-rs8-s_firmware"},{"vendor":"asus","product":"rs720q-e9-rs8_firmware"},{"vendor":"asus","product":"ws_c422_pro\\/se_firmware"},{"vendor":"asus","product":"ws_c621e_sage_firmware"},{"vendor":"asus","product":"ws_x299_pro\\/se_firmware"},{"vendor":"asus","product":"z11pa-d8_firmware"},{"vendor":"asus","product":"z11pa-d8c_firmware"},{"vendor":"asus","product":"z11pa-u12\\/10g-2s_firmware"},{"vendor":"asus","product":"z11pa-u12_firmware"},{"vendor":"asus","product":"z11pr-d16_firmware"}],"references":[{"url":"https://www.asus.com/content/ASUS-Product-Security-Advisory/","tags":["x_refsource_MISC","x_transferred","Vendor Advisory"]},{"url":"https://www.asus.com/tw/support/callus/","tags":["x_refsource_MISC","x_transferred","Vendor Advisory"]},{"url":"https://www.twcert.org.tw/tw/cp-132-4571-d454c-1.html","tags":["x_refsource_MISC","x_transferred","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-28201"},{"url":"https://github.com/advisories/GHSA-v9f6-cwjv-332v"}],"sources":{"cve":[{"id":"CVE-2021-28201","title":"ASUS BMC's firmware: buffer overflow - Service configuration-1 function","description":"The Service configuration-1 function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.","status":"published","published":"2021-04-06T05:02:19.279Z","modified":"2024-09-17T01:31:19.486Z","cvss":[{"version":"3.1","score":4.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"cna"}],"cwes":["CWE-120"],"updated_at":"2026-11-02T14:33:08.811269Z"}],"euvd":[{"id":"EUVD-2021-14891","description":"The Service configuration-1 function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.","status":"published","published":"2021-04-06T05:02:19Z","modified":"2024-09-17T01:31:19Z","cvss":[{"version":"3.1","score":4.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-03T00:28:48.901339Z"}],"ghsa":[{"id":"GHSA-v9f6-cwjv-332v","title":"The Service configuration-1 function in ASUS BMC’s firmware Web management page does not verify...","description":"The Service configuration-1 function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.","status":"published","published":"2022-05-24T22:28:58Z","modified":"2023-01-30T05:06:08Z","cwes":["CWE-120"],"updated_at":"2026-11-02T14:47:25.8676Z"}],"nvd":[{"id":"CVE-2021-28201","description":"The Service configuration-1 function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.","status":"published","published":"2021-04-06T05:15:16.737Z","modified":"2026-06-17T03:46:02.407Z","cvss":[{"version":"3.1","score":4.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"secondary"},{"version":"3.1","score":4.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"},{"version":"2.0","score":4,"vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-120"],"updated_at":"2026-11-02T14:06:51.610648Z"}]}}