{"cvss":0.0,"datePublished":"2026-06-22T00:00:00Z","dateUpdated":"2026-06-22T00:00:00Z","description":"The specific function in ASUS BMC’s firmware Web management page (Modify user’s information function) does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.","dueDate":"","id":"CVE-2021-28199","kev_catalogs":["vulncheck"],"knownRansomwareCampaignUse":"Unknown","product":"asmb9-ikvm_firmware","requiredAction":"Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.","severity":"HIGH","source":"vulncheck_kev","title":"ASUS asmb9-ikvm_firmware Buffer Copy without Checking Size of Input","vendor":"ASUS"}