Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-5777-v89v-cq59

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

The specific function in ASUS BMC’s firmware Web management page (Media support configuration setting) does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.

The specific function in ASUS BMC’s firmware Web management page (Media support configuration setting) does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.

EPSS

Процентиль: 75%
0.00895
Низкий

Дефекты

CWE-120

Связанные уязвимости

CVSS3: 4.9
nvd
почти 5 лет назад

The specific function in ASUS BMC’s firmware Web management page (Media support configuration setting) does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.

EPSS

Процентиль: 75%
0.00895
Низкий

Дефекты

CWE-120