CVE:CVE-2021-28187
CNNVD:CNNVD-202104-325
ASUS BMC Firmware是中国华硕（ASUS）公司的一个固件。
ASUS BMC’s firmware Web management page 存在安全特征问题漏洞，该漏洞源于specific function对用户输入的字符串长度不进行验证，导致缓冲区溢出漏洞。远程攻击者可利用该漏洞利用泄漏异常终止Web服务。
solution:Upgrade asus z10pr-d16_firmware to a higher version than 1.14.51,and avoid the version 1.14.51; Upgrade asus asmb8-ikvm_firmware to a higher version than 1.14.51,and avoid the version 1.14.51; Upgrade asus z10pe-d16_ws_firmware to a higher version than 1.14.2,and avoid the version 1.14.2