CVE:CVE-2021-28199
CNNVD:CNNVD-202104-317
ASUS BMC Firmware是中国华硕（ASUS）公司的一个固件。
ASUS BMC Firmware Web management page 存在安全特征问题漏洞，该漏洞源于specific function对用户输入的字符串长度不进行验证，导致缓冲区溢出漏洞。远程攻击者可利用该漏洞利用泄漏异常终止Web服务。
solution:Upgrade asus asmb9-ikvm_firmware to a higher version than 1.11.12,and avoid the version 1.11.12; Upgrade asus rs720a-e9-rs24-e_firmware to a higher version than 1.10.3,and avoid the version 1.10.3; Upgrade asus rs700a-e9-rs4_firmware to a higher version than 1.10.0,and avoid the version 1.10.0; Upgrade asus rs700-e9-rs4_firmware to a higher version than 1.09,and avoid the version 1.09; Upgrade asus esc4000_g4x_firmware to a higher version than 1.11.6,and avoid the version 1.11.6; Upgrade asus rs700-e9-rs12_firmware to a higher version than 1.11.5,and avoid the version 1.11.5; Upgrade asus rs100-e10-pi2_firmware to a higher version than 1.13.6,and avoid the version 1.13.6; Upgrade asus rs300-e10-ps4_firmware to a higher version than 1.13.6,and avoid the version 1.13.6; Upgrade asus rs300-e10-rs4_firmware to a higher version than 1.13.6,and avoid the version 1.13.6; Upgrade asus rs500a-e9-ps4_firmware to a higher version than 1.14.1,and avoid the version 1.14.1; Upgrade asus rs500a-e9-rs4_firmware to a higher version than 1.14.1,and avoid the version 1.14.1; Upgrade asus rs500a-e9_rs4_u_firmware to a higher version than 1.14.1,and avoid the version 1.14.1; Upgrade asus e700_g4_firmware to a higher version than 1.14.1,and avoid the version 1.14.1; Upgrade asus ws_c422_pro/se_firmware to a higher version than 1.14.1,and avoid the version 1.14.1; Upgrade asus ws_x299_pro/se_firmware to a higher version than 1.14.1,and avoid the version 1.14.1; Upgrade asus z11pa-u12_firmware to a higher version than 1.15.1,and avoid the version 1.15.1; Upgrade asus z11pa-u12/10g-2s_firmware to a higher version than 1.15.1,and avoid the version 1.15.1; Upgrade asus knpa-u16_firmware to a higher version than 1.13.4,and avoid the version 1.13.4; Upgrade asus esc4000_dhd_g4_firmware to a higher version than 1.13.7,and avoid the version 1.13.7; Upgrade asus esc4000_g4_firmware to a higher version than 1.15.2,and avoid the version 1.15.2; Upgrade asus rs720q-e9-rs24-s_firmware to a higher version than 1.15.0,and avoid the version 1.15.0; Upgrade asus rs720q-e9-rs8_firmware to a higher version than 1.15.0,and avoid the version 1.15.0; Upgrade asus rs720q-e9-rs8-s_firmware to a higher version than 1.15.0,and avoid the version 1.15.0; Upgrade asus z11pa-d8_firmware to a higher version than 1.14.1,and avoid the version 1.14.1; Upgrade asus z11pa-d8c_firmware to a higher version than 1.14.1,and avoid the version 1.14.1; Upgrade asus rs720-e9-rs24-u_firmware to a higher version than 1.14.3,and avoid the version 1.14.3; Upgrade asus rs720-e9-rs8-g_firmware to a higher version than 1.15.2,and avoid the version 1.15.2; Upgrade asus rs500-e9-ps4_firmware to a higher version than 1.15.4,and avoid the version 1.15.4; Upgrade asus pro_e800_g4_firmware to a higher version than 1.14.2,and avoid the version 1.14.2; Upgrade asus rs500-e9-rs4_firmware to a higher version than 1.15.4,and avoid the version 1.15.4; Upgrade asus rs500-e9-rs4-u_firmware to a higher version than 1.15.4,and avoid the version 1.15.4; Upgrade asus rs520-e9-rs12-e_firmware to a higher version than 1.15.3,and avoid the version 1.15.3; Upgrade asus rs520-e9-rs8_firmware to a higher version than 1.15.3,and avoid the version 1.15.3; Upgrade asus esc8000_g4_firmware to a higher version than 1.15.4,and avoid the version 1.15.4; Upgrade asus esc8000_g4/10g_firmware to a higher version than 1.15.4,and avoid the version 1.15.4; Upgrade asus rs720-e9-rs12-e_firmware to a higher version than 1.15.2,and avoid the version 1.15.2; Upgrade asus ws_c621e_sage_firmware to a higher version than 1.15.1,and avoid the version 1.15.1; Upgrade asus rs500a-e10-ps4_firmware to a higher version than 1.15.2,and avoid the version 1.15.2; Upgrade asus rs500a-e10-rs4_firmware to a higher version than 1.15.2,and avoid the version 1.15.2; Upgrade asus rs700a-e9-rs12v2_firmware to a higher version than 1.15.1,and avoid the version 1.15.1; Upgrade asus rs700a-e9-rs4v2_firmware to a higher version than 1.15.1,and avoid the version 1.15.1; Upgrade asus rs720a-e9-rs12v2_firmware to a higher version than 1.15.2,and avoid the version 1.15.2; Upgrade asus rs720a-e9-rs24v2_firmware to a higher version than 1.15.1,and avoid the version 1.15.1; Upgrade asus z11pr-d16_firmware to a higher version than 1.15.3,and avoid the version 1.15.3