Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-6cg2-hcj4-53h3

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

The SMTP configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.

The SMTP configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.

EPSS

Процентиль: 75%
0.00895
Низкий

Дефекты

CWE-120

Связанные уязвимости

CVSS3: 4.9
nvd
почти 5 лет назад

The SMTP configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.

EPSS

Процентиль: 75%
0.00895
Низкий

Дефекты

CWE-120