Asus Z11pa-u12/10g-2s Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Asus Z11pa-u12/10g-2s Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (17)

• CVE-2021-28190 — CVSS 4.9 (medium): The specific function in ASUS BMC’s firmware Web management page (Generate new certificate function) does not verify the string length…
• CVE-2021-28191 — CVSS 4.9 (medium): The Firmware update function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in…
• CVE-2021-28192 — CVSS 4.9 (medium): The specific function in ASUS BMC’s firmware Web management page (Remote video storage function) does not verify the string length…
• CVE-2021-28193 — CVSS 4.9 (medium): The SMTP configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting…
• CVE-2021-28194 — CVSS 4.9 (medium): The specific function in ASUS BMC’s firmware Web management page (Remote image configuration setting) does not verify the string length…
• CVE-2021-28195 — CVSS 4.9 (medium): The Radius configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users…
• CVE-2021-28196 — CVSS 4.9 (medium): The specific function in ASUS BMC’s firmware Web management page (Generate SSL certificate function) does not verify the string length…
• CVE-2021-28197 — CVSS 4.9 (medium): The Active Directory configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by…
• CVE-2021-28198 — CVSS 4.9 (medium): The Firmware protocol configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by…
• CVE-2021-28199 — CVSS 4.9 (medium): The specific function in ASUS BMC’s firmware Web management page (Modify user’s information function) does not verify the string length…
• CVE-2021-28200 — CVSS 4.9 (medium): The CD media configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users…
• CVE-2021-28201 — CVSS 4.9 (medium): The Service configuration-1 function in ASUS BMC’s firmware Web management page does not verify the string length entered by users…
• CVE-2021-28202 — CVSS 4.9 (medium): The Service configuration-2 function in ASUS BMC’s firmware Web management page does not verify the string length entered by users…
• CVE-2021-28206 — CVSS 4.9 (medium): The specific function in ASUS BMC’s firmware Web management page (Record video file function) does not filter the specific parameter. As…
• CVE-2021-28207 — CVSS 4.9 (medium): The specific function in ASUS BMC’s firmware Web management page (Get Help file function) does not filter the specific parameter. As…
• CVE-2021-28208 — CVSS 4.9 (medium): The specific function in ASUS BMC’s firmware Web management page (Get video file function) does not filter the specific parameter. As…
• CVE-2021-28209 — CVSS 4.9 (medium): The specific function in ASUS BMC’s firmware Web management page (Delete video file function) does not filter the specific parameter. As…