CVE-2021-28200

CVE.org · Published

Record status: Published
Identifier year (not publication year): 2021
Source publication: Apr 6, 2021
Source updated: Sep 16, 2024
Imported by cveboard: Oct 24, 2026
Source snapshot: cve_2026-10-24_midnight_baseline · Oct 24, 2026

CNA source text (English)

ASUS BMC's firmware: buffer overflow - CD media configuration function

The CD media configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

BMC firmware for ASMB9-iKVM

Vendor: ASUS
Product: BMC firmware for ASMB9-iKVM
Platforms: Unknown
Default status: Unknown

BMC firmware for ASMB9-iKVM · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1.11.12	`affected`	Unavailable	Unavailable	Unavailable	None listed

BMC firmware for RS720A-E9-RS24-E

Vendor: ASUS
Product: BMC firmware for RS720A-E9-RS24-E
Platforms: Unknown
Default status: Unknown

BMC firmware for RS720A-E9-RS24-E · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1.10.3	`affected`	Unavailable	Unavailable	Unavailable	None listed

BMC firmware for RS700A-E9-RS4

Vendor: ASUS
Product: BMC firmware for RS700A-E9-RS4
Platforms: Unknown
Default status: Unknown

BMC firmware for RS700A-E9-RS4 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1.10.0	`affected`	Unavailable	Unavailable	Unavailable	None listed

BMC firmware for RS700-E9-RS4

Vendor: ASUS
Product: BMC firmware for RS700-E9-RS4
Platforms: Unknown
Default status: Unknown

BMC firmware for RS700-E9-RS4 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1.09	`affected`	Unavailable	Unavailable	Unavailable	None listed

BMC firmware for ESC4000 G4X

Vendor: ASUS
Product: BMC firmware for ESC4000 G4X
Platforms: Unknown
Default status: Unknown

BMC firmware for ESC4000 G4X · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1.11.6	`affected`	Unavailable	Unavailable	Unavailable	None listed

BMC firmware for RS700-E9-RS12

Vendor: ASUS
Product: BMC firmware for RS700-E9-RS12
Platforms: Unknown
Default status: Unknown

BMC firmware for RS700-E9-RS12 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1.11.5	`affected`	Unavailable	Unavailable	Unavailable	None listed

BMC firmware for RS100-E10-PI2

Vendor: ASUS
Product: BMC firmware for RS100-E10-PI2
Platforms: Unknown
Default status: Unknown

BMC firmware for RS100-E10-PI2 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1.13.6	`affected`	Unavailable	Unavailable	Unavailable	None listed

BMC firmware for RS300-E10-PS4

Vendor: ASUS
Product: BMC firmware for RS300-E10-PS4
Platforms: Unknown
Default status: Unknown

BMC firmware for RS300-E10-PS4 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1.13.6	`affected`	Unavailable	Unavailable	Unavailable	None listed

BMC firmware for RS300-E10-RS4

Vendor: ASUS
Product: BMC firmware for RS300-E10-RS4
Platforms: Unknown
Default status: Unknown

BMC firmware for RS300-E10-RS4 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1.13.6	`affected`	Unavailable	Unavailable	Unavailable	None listed

BMC firmware for RS500A-E9-PS4

Vendor: ASUS
Product: BMC firmware for RS500A-E9-PS4
Platforms: Unknown
Default status: Unknown

BMC firmware for RS500A-E9-PS4 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1.14.1	`affected`	Unavailable	Unavailable	Unavailable	None listed

BMC firmware for RS500A-E9-RS4

Vendor: ASUS
Product: BMC firmware for RS500A-E9-RS4
Platforms: Unknown
Default status: Unknown

BMC firmware for RS500A-E9-RS4 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1.14.1	`affected`	Unavailable	Unavailable	Unavailable	None listed

BMC firmware for RS500A-E9 RS4

Vendor: ASUS
Product: BMC firmware for RS500A-E9 RS4
Platforms: Unknown
Default status: Unknown

BMC firmware for RS500A-E9 RS4 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1.14.1	`affected`	Unavailable	Unavailable	Unavailable	None listed

BMC firmware for E700 G4

Vendor: ASUS
Product: BMC firmware for E700 G4
Platforms: Unknown
Default status: Unknown

BMC firmware for E700 G4 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1.14.1	`affected`	Unavailable	Unavailable	Unavailable	None listed

BMC firmware for WS C422 PRO/SE

Vendor: ASUS
Product: BMC firmware for WS C422 PRO/SE
Platforms: Unknown
Default status: Unknown

BMC firmware for WS C422 PRO/SE · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1.14.1	`affected`	Unavailable	Unavailable	Unavailable	None listed

BMC firmware for WS X299 PRO/SE

Vendor: ASUS
Product: BMC firmware for WS X299 PRO/SE
Platforms: Unknown
Default status: Unknown

BMC firmware for WS X299 PRO/SE · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1.14.1	`affected`	Unavailable	Unavailable	Unavailable	None listed

BMC firmware for Z11PA-U12

Vendor: ASUS
Product: BMC firmware for Z11PA-U12
Platforms: Unknown
Default status: Unknown

BMC firmware for Z11PA-U12 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1.15.1	`affected`	Unavailable	Unavailable	Unavailable	None listed

BMC firmware for Z11PA-U12/10G-2S

Vendor: ASUS
Product: BMC firmware for Z11PA-U12/10G-2S
Platforms: Unknown
Default status: Unknown

BMC firmware for Z11PA-U12/10G-2S · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1.15.1	`affected`	Unavailable	Unavailable	Unavailable	None listed

BMC firmware for KNPA-U16

Vendor: ASUS
Product: BMC firmware for KNPA-U16
Platforms: Unknown
Default status: Unknown

BMC firmware for KNPA-U16 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1.13.4	`affected`	Unavailable	Unavailable	Unavailable	None listed

BMC firmware for ESC4000 DHD G4

Vendor: ASUS
Product: BMC firmware for ESC4000 DHD G4
Platforms: Unknown
Default status: Unknown

BMC firmware for ESC4000 DHD G4 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1.13.7	`affected`	Unavailable	Unavailable	Unavailable	None listed

BMC firmware for ESC4000 G4

Vendor: ASUS
Product: BMC firmware for ESC4000 G4
Platforms: Unknown
Default status: Unknown

BMC firmware for ESC4000 G4 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1.15.2	`affected`	Unavailable	Unavailable	Unavailable	None listed

BMC firmware for RS720Q-E9-RS24-S

Vendor: ASUS
Product: BMC firmware for RS720Q-E9-RS24-S
Platforms: Unknown
Default status: Unknown

BMC firmware for RS720Q-E9-RS24-S · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1.15.0	`affected`	Unavailable	Unavailable	Unavailable	None listed

BMC firmware for RS720Q-E9-RS8

Vendor: ASUS
Product: BMC firmware for RS720Q-E9-RS8
Platforms: Unknown
Default status: Unknown

BMC firmware for RS720Q-E9-RS8 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1.15.0	`affected`	Unavailable	Unavailable	Unavailable	None listed

BMC firmware for RS720Q-E9-RS8-S

Vendor: ASUS
Product: BMC firmware for RS720Q-E9-RS8-S
Platforms: Unknown
Default status: Unknown

BMC firmware for RS720Q-E9-RS8-S · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1.15.0	`affected`	Unavailable	Unavailable	Unavailable	None listed

BMC firmware for Z11PA-D8

Vendor: ASUS
Product: BMC firmware for Z11PA-D8
Platforms: Unknown
Default status: Unknown

BMC firmware for Z11PA-D8 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1.14.1	`affected`	Unavailable	Unavailable	Unavailable	None listed

BMC firmware for Z11PA-D8C

Vendor: ASUS
Product: BMC firmware for Z11PA-D8C
Platforms: Unknown
Default status: Unknown

BMC firmware for Z11PA-D8C · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1.14.1	`affected`	Unavailable	Unavailable	Unavailable	None listed

BMC firmware for RS720-E9-RS24-U

Vendor: ASUS
Product: BMC firmware for RS720-E9-RS24-U
Platforms: Unknown
Default status: Unknown

BMC firmware for RS720-E9-RS24-U · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1.14.3	`affected`	Unavailable	Unavailable	Unavailable	None listed

BMC firmware for RS720-E9-RS8-G

Vendor: ASUS
Product: BMC firmware for RS720-E9-RS8-G
Platforms: Unknown
Default status: Unknown

BMC firmware for RS720-E9-RS8-G · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1.15.2	`affected`	Unavailable	Unavailable	Unavailable	None listed

BMC firmware for RS500-E9-PS4

Vendor: ASUS
Product: BMC firmware for RS500-E9-PS4
Platforms: Unknown
Default status: Unknown

BMC firmware for RS500-E9-PS4 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1.15.4	`affected`	Unavailable	Unavailable	Unavailable	None listed

BMC firmware for Pro E800 G4

Vendor: ASUS
Product: BMC firmware for Pro E800 G4
Platforms: Unknown
Default status: Unknown

BMC firmware for Pro E800 G4 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1.14.2	`affected`	Unavailable	Unavailable	Unavailable	None listed

BMC firmware for RS500-E9-RS4

Vendor: ASUS
Product: BMC firmware for RS500-E9-RS4
Platforms: Unknown
Default status: Unknown

BMC firmware for RS500-E9-RS4 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1.15.4	`affected`	Unavailable	Unavailable	Unavailable	None listed

BMC firmware for RS500-E9-RS4-U

Vendor: ASUS
Product: BMC firmware for RS500-E9-RS4-U
Platforms: Unknown
Default status: Unknown

BMC firmware for RS500-E9-RS4-U · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1.15.4	`affected`	Unavailable	Unavailable	Unavailable	None listed

BMC firmware for RS520-E9-RS12-E

Vendor: ASUS
Product: BMC firmware for RS520-E9-RS12-E
Platforms: Unknown
Default status: Unknown

BMC firmware for RS520-E9-RS12-E · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1.15.3	`affected`	Unavailable	Unavailable	Unavailable	None listed

BMC firmware for RS520-E9-RS8

Vendor: ASUS
Product: BMC firmware for RS520-E9-RS8
Platforms: Unknown
Default status: Unknown

BMC firmware for RS520-E9-RS8 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1.15.3	`affected`	Unavailable	Unavailable	Unavailable	None listed

BMC firmware for ESC8000 G4

Vendor: ASUS
Product: BMC firmware for ESC8000 G4
Platforms: Unknown
Default status: Unknown

BMC firmware for ESC8000 G4 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1.15.4	`affected`	Unavailable	Unavailable	Unavailable	None listed

BMC firmware for ESC8000 G4/10G

Vendor: ASUS
Product: BMC firmware for ESC8000 G4/10G
Platforms: Unknown
Default status: Unknown

BMC firmware for ESC8000 G4/10G · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1.15.4	`affected`	Unavailable	Unavailable	Unavailable	None listed

BMC firmware for RS720-E9-RS12-E

Vendor: ASUS
Product: BMC firmware for RS720-E9-RS12-E
Platforms: Unknown
Default status: Unknown

BMC firmware for RS720-E9-RS12-E · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1.15.2	`affected`	Unavailable	Unavailable	Unavailable	None listed

BMC firmware for WS C621E SAGE

Vendor: ASUS
Product: BMC firmware for WS C621E SAGE
Platforms: Unknown
Default status: Unknown

BMC firmware for WS C621E SAGE · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1.15.1	`affected`	Unavailable	Unavailable	Unavailable	None listed

BMC firmware for RS500A-E10-PS4

Vendor: ASUS
Product: BMC firmware for RS500A-E10-PS4
Platforms: Unknown
Default status: Unknown

BMC firmware for RS500A-E10-PS4 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1.15.2	`affected`	Unavailable	Unavailable	Unavailable	None listed

BMC firmware for RS500A-E10-RS4

Vendor: ASUS
Product: BMC firmware for RS500A-E10-RS4
Platforms: Unknown
Default status: Unknown

BMC firmware for RS500A-E10-RS4 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1.15.2	`affected`	Unavailable	Unavailable	Unavailable	None listed

BMC firmware for RS700A-E9-RS12V2

Vendor: ASUS
Product: BMC firmware for RS700A-E9-RS12V2
Platforms: Unknown
Default status: Unknown

BMC firmware for RS700A-E9-RS12V2 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1.15.1	`affected`	Unavailable	Unavailable	Unavailable	None listed

BMC firmware for RS700A-E9-RS4V2

Vendor: ASUS
Product: BMC firmware for RS700A-E9-RS4V2
Platforms: Unknown
Default status: Unknown

BMC firmware for RS700A-E9-RS4V2 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1.15.1	`affected`	Unavailable	Unavailable	Unavailable	None listed

BMC firmware for RS720A-E9-RS12V2

Vendor: ASUS
Product: BMC firmware for RS720A-E9-RS12V2
Platforms: Unknown
Default status: Unknown

BMC firmware for RS720A-E9-RS12V2 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1.15.2	`affected`	Unavailable	Unavailable	Unavailable	None listed

BMC firmware for RS720A-E9-RS24V2

Vendor: ASUS
Product: BMC firmware for RS720A-E9-RS24V2
Platforms: Unknown
Default status: Unknown

BMC firmware for RS720A-E9-RS24V2 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1.15.1	`affected`	Unavailable	Unavailable	Unavailable	None listed

BMC firmware for Z11PR-D16

Vendor: ASUS
Product: BMC firmware for Z11PR-D16
Platforms: Unknown
Default status: Unknown

BMC firmware for Z11PR-D16 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1.15.3	`affected`	Unavailable	Unavailable	Unavailable	None listed