CVE-2021-28185 : What You Need to Know

ASUS BMC's firmware for various products is affected by a buffer overflow vulnerability due to inadequate user input validation. Attackers can exploit this issue to gain privileged access and disrupt the web service.

Understanding CVE-2021-28185

This CVE relates to a buffer overflow vulnerability in ASUS BMC's firmware due to improper input checking, allowing remote attackers to execute malicious activities.

What is CVE-2021-28185?

The vulnerability lies in the specific function of ASUS BMC firmware's Web management page, where user-entered string length is not adequately verified, leading to a buffer overflow issue.

The Impact of CVE-2021-28185

With a CVSS base score of 4.9 (Medium Severity), this vulnerability could be exploited by attackers to disrupt the web service and gain privileged access to affected systems.

Technical Details of CVE-2021-28185

This section covers the technical aspects of the vulnerability, including its description, affected systems, and exploitation mechanism.

Vulnerability Description

The vulnerability in ASUS BMC firmware allows remote attackers to exploit a buffer overflow by manipulating user input string lengths, leading to unauthorized service termination and potential system compromise.

Affected Systems and Versions

The following ASUS products and firmware versions are impacted:

BMC firmware for Z10PR-D16 (Version 1.14.51)
BMC firmware for ASMB8-iKVM (Version 1.14.51)
BMC firmware for Z10PE-D16 WS (Version 1.14.2)

Exploitation Mechanism

Attackers can leverage this vulnerability by submitting specially crafted input strings to the affected ASUS BMC firmware, triggering a buffer overflow condition and potentially gaining system control.

Mitigation and Prevention

To protect systems from CVE-2021-28185, prompt actions are necessary to address the vulnerability and enhance overall security.

Immediate Steps to Take

Users should update their BMC firmware to the patched versions provided by ASUS:

Z10PR-D16: Version 1.16.1
ASMB8-iKVM: Version 1.16.1
Z10PE-D16 WS: Version 1.16.1

Long-Term Security Practices

Implementing robust input validation mechanisms and regular security assessments can help prevent similar vulnerabilities. Organizations should also stay updated on security advisories from ASUS.

Patching and Updates

Regularly monitor for firmware updates and security announcements from ASUS, applying patches promptly to mitigate the risk of exploitation.