Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-2g54-42rw-p43x

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

The specific function in ASUS BMC’s firmware Web management page (Modify user’s information function) does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.

The specific function in ASUS BMC’s firmware Web management page (Modify user’s information function) does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.

EPSS

Процентиль: 75%
0.009
Низкий

Дефекты

CWE-120

Связанные уязвимости

CVSS3: 4.9
nvd
больше 4 лет назад

The specific function in ASUS BMC’s firmware Web management page (Modify user’s information function) does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.

EPSS

Процентиль: 75%
0.009
Низкий

Дефекты

CWE-120