CVE-2021-28207

published 2021-04-06

CVE-2021-28207: The specific function in ASUS BMC’s firmware Web management page (Get Help file function) does not filter the specific parameter. As obtaining the…

Priority P4 29 medium 4.9 CVSS 3.1

AV N AC L PR H UI N S U C H I N A N

The specific function in ASUS BMC’s firmware Web management page (Get Help file function) does not filter the specific parameter. As obtaining the administrator permission, remote attackers can use the means of path traversal to access system files.

Affected

88 ranges · showing 25

Vendor	Product	Version range	Fixed in
asus	asmb9-ikvm_firmware	—	—
asus	bmc_firmware_for_asmb9-ikvm	—	—
asus	bmc_firmware_for_e700_g4	—	—
asus	bmc_firmware_for_esc4000_dhd_g4	—	—
asus	bmc_firmware_for_esc4000_g4	—	—
asus	bmc_firmware_for_esc4000_g4x	—	—
asus	bmc_firmware_for_esc8000_g4	—	—
asus	bmc_firmware_for_esc8000_g4_10g	—	—
asus	bmc_firmware_for_knpa-u16	—	—
asus	bmc_firmware_for_pro_e800_g4	—	—
asus	bmc_firmware_for_rs100-e10-pi2	—	—
asus	bmc_firmware_for_rs300-e10-ps4	—	—
asus	bmc_firmware_for_rs300-e10-rs4	—	—
asus	bmc_firmware_for_rs500-e9-ps4	—	—
asus	bmc_firmware_for_rs500-e9-rs4	—	—
asus	bmc_firmware_for_rs500-e9-rs4-u	—	—
asus	bmc_firmware_for_rs500a-e10-ps4	—	—
asus	bmc_firmware_for_rs500a-e10-rs4	—	—
asus	bmc_firmware_for_rs500a-e9-ps4	—	—
asus	bmc_firmware_for_rs500a-e9-rs4	—	—
asus	bmc_firmware_for_rs500a-e9_rs4	—	—
asus	bmc_firmware_for_rs520-e9-rs12-e	—	—
asus	bmc_firmware_for_rs520-e9-rs8	—	—
asus	bmc_firmware_for_rs700-e9-rs12	—	—
asus	bmc_firmware_for_rs700-e9-rs4	—	—

CVSS provenance

nvd v3.1 4.9 MEDIUM CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

nvd v2.0 6.8 MEDIUM AV:N/AC:L/Au:S/C:C/I:N/A:N

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-22