CVE-2021-41289 - ASUS P453UJ - Improper Restriction of Operations within the Bounds of a Memory Buffer

Back Back to CVE browser

HIGH

ASUS P453UJ - Improper Restriction of Operations within the Bounds of a Memory Buffer

Published Nov 15, 2021

7.1

HIGH

CVSS 3.1

EPSS 0.20%

Description

ASUS P453UJ contains the Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability. With a general user’s permission, local attackers can modify the BIOS by replacing or filling in the content of the designated Memory DataBuffer, which causing a failure of integrity verification and further resulting in a failure to boot.

Affected products

Vendor ASUS Product P453uj Bios Default
n/a
- Version
  311
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

ASUS

P453uj Bios

n/a

Version	Status	Constraints
311	affected	-

Remediation

Vendor solution

ASUS P453UJ BIOS 313

Weaknesses (1)

CWE-119

Buffer Overflow

References (3)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-28319
Advisory
https://www.asus.com/tw/supportonly/P453UJ/HelpDesk_BIOS/
x_refsource_MISCVendor Advisory
https://www.twcert.org.tw/tw/cp-132-5284-35790-1.html
x_refsource_MISCThird Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-28319		Advisory
https://www.asus.com/tw/supportonly/P453UJ/HelpDesk_BIOS/		x_refsource_MISCVendor Advisory
https://www.twcert.org.tw/tw/cp-132-5284-35790-1.html		x_refsource_MISCThird Party Advisory