CVE-2021-28193 : Security Advisory and Response

A Buffer overflow vulnerability exists in ASUS BMC's firmware due to the lack of string length verification in the SMTP configuration function. Remote attackers with privileged permissions can exploit this issue to disrupt the Web service.

Understanding CVE-2021-28193

This CVE describes a critical vulnerability in ASUS BMC firmware that can be exploited by remote attackers to cause a buffer overflow.

What is CVE-2021-28193?

The vulnerability in ASUS BMC firmware arises from inadequate verification of string length in the SMTP configuration function, allowing attackers to trigger a buffer overflow by providing excessively long input.

The Impact of CVE-2021-28193

The impact of this vulnerability is significant, with remote attackers being able to disrupt the Web service by exploiting the buffer overflow flaw in ASUS BMC firmware.

Technical Details of CVE-2021-28193

This section details the specific technical aspects of the vulnerability.

Vulnerability Description

The vulnerability results from the lack of string length validation in the SMTP configuration function within ASUS BMC firmware.

Affected Systems and Versions

ASUS products such as RS700-E9-RS12, RS100-E10-PI2, WS X299 PRO/SE, and many more are affected.

Exploitation Mechanism

Attackers with high privileges can manipulate the SMTP configuration function to input excessively long strings, triggering a buffer overflow.

Mitigation and Prevention

To address CVE-2021-28193, users and administrators are advised to take immediate action.

Immediate Steps to Take

Update affected BMC firmware versions to secure the systems from potential attacks.

Long-Term Security Practices

Regularly check for firmware updates and security advisories from ASUS to stay protected from emerging threats.

Patching and Updates

Ensure that the following versions of BMC firmware are applied across affected ASUS products:

ESC4000 G4X 1.15.6
RS700-E9-RS12 1.15.4
RS100-E10-PI2 1.15.3
RS300-E10-PS4 1.15.3
RS300-E10-RS4 1.15.3
RS500A-E9-PS4 1.14.2
RS500A-E9-RS4 1.14.2
... (and more)