Insufficient input validation in ASP may allow an attacker with a malicious BIOS to potentially cause a denial of service.
CWE-20, CWE-20