CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-28209

The specific function in ASUS BMC’s firmware Web management page (Delete video file function) does not filter the specific parameter. As obtaining the administrator permission, remote attackers can use the means of path traversal to access system files.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.005

EPSS Ranking 64.7%

CVSS Severity

CVSS v3 Score 4.9

CVSS v2 Score 6.8

References

Products affected by CVE-2021-28209

Asus » Asmb9-Ikvm » Version: N/A

cpe:2.3:h:asus:asmb9-ikvm:-
Asus » E700 G4 » Version: N/A

cpe:2.3:h:asus:e700_g4:-
Asus » Esc4000 Dhd G4 » Version: N/A

cpe:2.3:h:asus:esc4000_dhd_g4:-
Asus » Esc4000 G4 » Version: N/A

cpe:2.3:h:asus:esc4000_g4:-
Asus » Esc4000 G4x » Version: N/A

cpe:2.3:h:asus:esc4000_g4x:-
Asus » Esc8000 G4/10g » Version: N/A

cpe:2.3:h:asus:esc8000_g4/10g:-
Asus » Esc8000 G4 » Version: N/A

cpe:2.3:h:asus:esc8000_g4:-
Asus » Knpa-U16 » Version: N/A

cpe:2.3:h:asus:knpa-u16:-
Asus » Pro E800 G4 » Version: N/A

cpe:2.3:h:asus:pro_e800_g4:-
Asus » Rs100-E10-Pi2 » Version: N/A

cpe:2.3:h:asus:rs100-e10-pi2:-
Asus » Rs300-E10-Ps4 » Version: N/A

cpe:2.3:h:asus:rs300-e10-ps4:-
Asus » Rs300-E10-Rs4 » Version: N/A

cpe:2.3:h:asus:rs300-e10-rs4:-
Asus » Rs500-E9-Ps4 » Version: N/A

cpe:2.3:h:asus:rs500-e9-ps4:-
Asus » Rs500-E9-Rs4-U » Version: N/A

cpe:2.3:h:asus:rs500-e9-rs4-u:-
Asus » Rs500-E9-Rs4 » Version: N/A

cpe:2.3:h:asus:rs500-e9-rs4:-
Asus » Rs500a-E10-Ps4 » Version: N/A

cpe:2.3:h:asus:rs500a-e10-ps4:-
Asus » Rs500a-E10-Rs4 » Version: N/A

cpe:2.3:h:asus:rs500a-e10-rs4:-
Asus » Rs500a-E9-Ps4 » Version: N/A

cpe:2.3:h:asus:rs500a-e9-ps4:-
Asus » Rs500a-E9-Rs4 » Version: N/A

cpe:2.3:h:asus:rs500a-e9-rs4:-
Asus » Rs500a-E9 Rs4 U » Version: N/A

cpe:2.3:h:asus:rs500a-e9_rs4_u:-
Asus » Rs520-E9-Rs12-E » Version: N/A

cpe:2.3:h:asus:rs520-e9-rs12-e:-
Asus » Rs520-E9-Rs8 » Version: N/A

cpe:2.3:h:asus:rs520-e9-rs8:-
Asus » Rs700-E9-Rs12 » Version: N/A

cpe:2.3:h:asus:rs700-e9-rs12:-
Asus » Rs700-E9-Rs4 » Version: N/A

cpe:2.3:h:asus:rs700-e9-rs4:-
Asus » Rs700a-E9-Rs12v2 » Version: N/A

cpe:2.3:h:asus:rs700a-e9-rs12v2:-
Asus » Rs700a-E9-Rs4 » Version: N/A

cpe:2.3:h:asus:rs700a-e9-rs4:-
Asus » Rs700a-E9-Rs4v2 » Version: N/A

cpe:2.3:h:asus:rs700a-e9-rs4v2:-
Asus » Rs720-E9-Rs12-E » Version: N/A

cpe:2.3:h:asus:rs720-e9-rs12-e:-
Asus » Rs720-E9-Rs24-U » Version: N/A

cpe:2.3:h:asus:rs720-e9-rs24-u:-
Asus » Rs720-E9-Rs8-G » Version: N/A

cpe:2.3:h:asus:rs720-e9-rs8-g:-
Asus » Rs720a-E9-Rs12v2 » Version: N/A

cpe:2.3:h:asus:rs720a-e9-rs12v2:-
Asus » Rs720a-E9-Rs24-E » Version: N/A

cpe:2.3:h:asus:rs720a-e9-rs24-e:-
Asus » Rs720a-E9-Rs24v2 » Version: N/A

cpe:2.3:h:asus:rs720a-e9-rs24v2:-
Asus » Rs720q-E9-Rs24-S » Version: N/A

cpe:2.3:h:asus:rs720q-e9-rs24-s:-
Asus » Rs720q-E9-Rs8-S » Version: N/A

cpe:2.3:h:asus:rs720q-e9-rs8-s:-
Asus » Rs720q-E9-Rs8 » Version: N/A

cpe:2.3:h:asus:rs720q-e9-rs8:-
Asus » Ws C422 Pro/se » Version: N/A

cpe:2.3:h:asus:ws_c422_pro/se:-
Asus » Ws C621e Sage » Version: N/A

cpe:2.3:h:asus:ws_c621e_sage:-
Asus » Ws X299 Pro/se » Version: N/A

cpe:2.3:h:asus:ws_x299_pro/se:-
Asus » Z11pa-D8 » Version: N/A

cpe:2.3:h:asus:z11pa-d8:-
Asus » Z11pa-D8c » Version: N/A

cpe:2.3:h:asus:z11pa-d8c:-
Asus » Z11pa-U12/10g-2s » Version: N/A

cpe:2.3:h:asus:z11pa-u12/10g-2s:-
Asus » Z11pa-U12 » Version: N/A

cpe:2.3:h:asus:z11pa-u12:-
Asus » Z11pr-D16 » Version: N/A

cpe:2.3:h:asus:z11pr-d16:-
Asus » Asmb9-Ikvm Firmware » Version: 1.11.12

cpe:2.3:o:asus:asmb9-ikvm_firmware:1.11.12
Asus » E700 G4 Firmware » Version: 1.14.1

cpe:2.3:o:asus:e700_g4_firmware:1.14.1
Asus » Esc4000 Dhd G4 Firmware » Version: 1.13.7

cpe:2.3:o:asus:esc4000_dhd_g4_firmware:1.13.7
Asus » Esc4000 G4 Firmware » Version: 1.15.2

cpe:2.3:o:asus:esc4000_g4_firmware:1.15.2
Asus » Esc4000 G4x Firmware » Version: 1.11.6

cpe:2.3:o:asus:esc4000_g4x_firmware:1.11.6
Asus » Esc8000 G4/10g Firmware » Version: 1.15.4

cpe:2.3:o:asus:esc8000_g4/10g_firmware:1.15.4
Asus » Esc8000 G4 Firmware » Version: 1.15.4

cpe:2.3:o:asus:esc8000_g4_firmware:1.15.4
Asus » Knpa-U16 Firmware » Version: 1.13.4

cpe:2.3:o:asus:knpa-u16_firmware:1.13.4
Asus » Pro E800 G4 Firmware » Version: 1.14.2

cpe:2.3:o:asus:pro_e800_g4_firmware:1.14.2
Asus » Rs100-E10-Pi2 Firmware » Version: 1.13.6

cpe:2.3:o:asus:rs100-e10-pi2_firmware:1.13.6
Asus » Rs300-E10-Ps4 Firmware » Version: 1.13.6

cpe:2.3:o:asus:rs300-e10-ps4_firmware:1.13.6
Asus » Rs300-E10-Rs4 Firmware » Version: 1.13.6

cpe:2.3:o:asus:rs300-e10-rs4_firmware:1.13.6
Asus » Rs500-E9-Ps4 Firmware » Version: 1.15.4

cpe:2.3:o:asus:rs500-e9-ps4_firmware:1.15.4
Asus » Rs500-E9-Rs4-U Firmware » Version: 1.15.4

cpe:2.3:o:asus:rs500-e9-rs4-u_firmware:1.15.4
Asus » Rs500-E9-Rs4 Firmware » Version: 1.15.4

cpe:2.3:o:asus:rs500-e9-rs4_firmware:1.15.4
Asus » Rs500a-E10-Ps4 Firmware » Version: 1.15.2

cpe:2.3:o:asus:rs500a-e10-ps4_firmware:1.15.2
Asus » Rs500a-E10-Rs4 Firmware » Version: 1.15.2

cpe:2.3:o:asus:rs500a-e10-rs4_firmware:1.15.2
Asus » Rs500a-E9-Ps4 Firmware » Version: 1.14.1

cpe:2.3:o:asus:rs500a-e9-ps4_firmware:1.14.1
Asus » Rs500a-E9-Rs4 Firmware » Version: 1.14.1

cpe:2.3:o:asus:rs500a-e9-rs4_firmware:1.14.1
Asus » Rs500a-E9 Rs4 U Firmware » Version: 1.14.1

cpe:2.3:o:asus:rs500a-e9_rs4_u_firmware:1.14.1
Asus » Rs520-E9-Rs12-E Firmware » Version: 1.15.3

cpe:2.3:o:asus:rs520-e9-rs12-e_firmware:1.15.3
Asus » Rs520-E9-Rs8 Firmware » Version: 1.15.3

cpe:2.3:o:asus:rs520-e9-rs8_firmware:1.15.3
Asus » Rs700-E9-Rs12 Firmware » Version: 1.11.5

cpe:2.3:o:asus:rs700-e9-rs12_firmware:1.11.5
Asus » Rs700-E9-Rs4 Firmware » Version: 1.09

cpe:2.3:o:asus:rs700-e9-rs4_firmware:1.09
Asus » Rs700a-E9-Rs12v2 Firmware » Version: 1.15.1

cpe:2.3:o:asus:rs700a-e9-rs12v2_firmware:1.15.1
Asus » Rs700a-E9-Rs4 Firmware » Version: 1.10.0

cpe:2.3:o:asus:rs700a-e9-rs4_firmware:1.10.0
Asus » Rs700a-E9-Rs4v2 Firmware » Version: 1.15.1

cpe:2.3:o:asus:rs700a-e9-rs4v2_firmware:1.15.1
Asus » Rs720-E9-Rs12-E Firmware » Version: 1.15.2

cpe:2.3:o:asus:rs720-e9-rs12-e_firmware:1.15.2
Asus » Rs720-E9-Rs24-U Firmware » Version: 1.14.3

cpe:2.3:o:asus:rs720-e9-rs24-u_firmware:1.14.3
Asus » Rs720-E9-Rs8-G Firmware » Version: 1.15.2

cpe:2.3:o:asus:rs720-e9-rs8-g_firmware:1.15.2
Asus » Rs720a-E9-Rs12v2 Firmware » Version: 1.15.2

cpe:2.3:o:asus:rs720a-e9-rs12v2_firmware:1.15.2
Asus » Rs720a-E9-Rs24-E Firmware » Version: 1.10.3

cpe:2.3:o:asus:rs720a-e9-rs24-e_firmware:1.10.3
Asus » Rs720a-E9-Rs24v2 Firmware » Version: 1.15.1

cpe:2.3:o:asus:rs720a-e9-rs24v2_firmware:1.15.1
Asus » Rs720q-E9-Rs24-S Firmware » Version: 1.15.0

cpe:2.3:o:asus:rs720q-e9-rs24-s_firmware:1.15.0
Asus » Rs720q-E9-Rs8-S Firmware » Version: 1.15.0

cpe:2.3:o:asus:rs720q-e9-rs8-s_firmware:1.15.0
Asus » Rs720q-E9-Rs8 Firmware » Version: 1.15.0

cpe:2.3:o:asus:rs720q-e9-rs8_firmware:1.15.0
Asus » Ws C422 Pro/se Firmware » Version: 1.14.1

cpe:2.3:o:asus:ws_c422_pro/se_firmware:1.14.1
Asus » Ws C621e Sage Firmware » Version: 1.15.1

cpe:2.3:o:asus:ws_c621e_sage_firmware:1.15.1
Asus » Ws X299 Pro/se Firmware » Version: 1.14.1

cpe:2.3:o:asus:ws_x299_pro/se_firmware:1.14.1
Asus » Z11pa-D8 Firmware » Version: 1.14.1

cpe:2.3:o:asus:z11pa-d8_firmware:1.14.1
Asus » Z11pa-D8c Firmware » Version: 1.14.1

cpe:2.3:o:asus:z11pa-d8c_firmware:1.14.1
Asus » Z11pa-U12/10g-2s Firmware » Version: 1.15.1

cpe:2.3:o:asus:z11pa-u12/10g-2s_firmware:1.15.1
Asus » Z11pa-U12 Firmware » Version: 1.15.1

cpe:2.3:o:asus:z11pa-u12_firmware:1.15.1
Asus » Z11pr-D16 Firmware » Version: 1.15.3

cpe:2.3:o:asus:z11pr-d16_firmware:1.15.3

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-28209

Products

Pricing

Contact Us