Lucene search
K
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

CVE-2021-28208

🗓️ 06 Apr 2021 05:02:25Reported by twcertType 
cve
 cve🔗 web.nvd.nist.gov👁 64 Views

ASUS BMC firmware Web management page allows unauthorized access

Related
Detection
Affected
Refs
ReporterTitlePublishedViews
Family
CNNVD		ASUS BMC Firmware 路径遍历漏洞
6 Apr 202100:00
–cnnvd
CNVD		ASUS BMC Firmware Path Traversal Vulnerability (CNVD-2021-36268)
8 Apr 202100:00
–cnvd
Cvelist		CVE-2021-28208 ASUS BMC's firmware: path traversal - Get video file function
6 Apr 202105:02
–cvelist
EUVD		EUVD-2021-14898
7 Oct 202500:30
–euvd
NVD		CVE-2021-28208
6 Apr 202105:15
–nvd
Prion		Path traversal
6 Apr 202105:15
–prion
NVD
Vulners
Node
asusasmb9-ikvm_firmwareMatch1.11.12
AND
asusasmb9-ikvmMatch-
Node
asusrs720a-e9-rs24-e_firmwareMatch1.10.3
AND
asusrs720a-e9-rs24-eMatch-
Node
asusrs700a-e9-rs4_firmwareMatch1.10.0
AND
asusrs700a-e9-rs4Match-
Node
asusrs700-e9-rs4_firmwareMatch1.09
AND
asusrs700-e9-rs4Match-
Node
asusesc4000_g4x_firmwareMatch1.11.6
AND
asusesc4000_g4xMatch-
Node
asusrs700-e9-rs12_firmwareMatch1.11.5
AND
asusrs700-e9-rs12Match-
Node
asusrs100-e10-pi2_firmwareMatch1.13.6
AND
asusrs100-e10-pi2Match-
Node
asusrs300-e10-ps4_firmwareMatch1.13.6
AND
asusrs300-e10-ps4Match-
Node
asusrs300-e10-rs4_firmwareMatch1.13.6
AND
asusrs300-e10-rs4Match-
Node
asusrs500a-e9-ps4_firmwareMatch1.14.1
AND
asusrs500a-e9-ps4Match-
Node
asusrs500a-e9-rs4_firmwareMatch1.14.1
AND
asusrs500a-e9-rs4Match-
Node
asusrs500a-e9_rs4_u_firmwareMatch1.14.1
AND
asusrs500a-e9_rs4_uMatch-
Node
asuse700_g4_firmwareMatch1.14.1
AND
asuse700_g4Match-
Node
asusws_c422_pro/se_firmwareMatch1.14.1
AND
asusws_c422_pro/seMatch-
Node
asusws_x299_pro/se_firmwareMatch1.14.1
AND
asusws_x299_pro/seMatch-
Node
asusz11pa-u12_firmwareMatch1.15.1
AND
asusz11pa-u12Match-
Node
asusz11pa-u12/10g-2s_firmwareMatch1.15.1
AND
asusz11pa-u12/10g-2sMatch-
Node
asusknpa-u16_firmwareMatch1.13.4
AND
asusknpa-u16Match-
Node
asusesc4000_dhd_g4_firmwareMatch1.13.7
AND
asusesc4000_dhd_g4Match-
Node
asusesc4000_g4_firmwareMatch1.15.2
AND
asusesc4000_g4Match-
Node
asusrs720q-e9-rs24-s_firmwareMatch1.15.0
AND
asusrs720q-e9-rs24-sMatch-
Node
asusrs720q-e9-rs8_firmwareMatch1.15.0
AND
asusrs720q-e9-rs8Match-
Node
asusrs720q-e9-rs8-s_firmwareMatch1.15.0
AND
asusrs720q-e9-rs8-sMatch-
Node
asusz11pa-d8_firmwareMatch1.14.1
AND
asusz11pa-d8Match-
Node
asusz11pa-d8c_firmwareMatch1.14.1
AND
asusz11pa-d8cMatch-
Node
asusrs720-e9-rs24-u_firmwareMatch1.14.3
AND
asusrs720-e9-rs24-uMatch-
Node
asusrs720-e9-rs8-g_firmwareMatch1.15.2
AND
asusrs720-e9-rs8-gMatch-
Node
asusrs500-e9-ps4_firmwareMatch1.15.4
AND
asusrs500-e9-ps4Match-
Node
asuspro_e800_g4_firmwareMatch1.14.2
AND
asuspro_e800_g4Match-
Node
asusrs500-e9-rs4_firmwareMatch1.15.4
AND
asusrs500-e9-rs4Match-
Node
asusrs500-e9-rs4-u_firmwareMatch1.15.4
AND
asusrs500-e9-rs4-uMatch-
Node
asusrs520-e9-rs12-e_firmwareMatch1.15.3
AND
asusrs520-e9-rs12-eMatch-
Node
asusrs520-e9-rs8_firmwareMatch1.15.3
AND
asusrs520-e9-rs8Match-
Node
asusesc8000_g4_firmwareMatch1.15.4
AND
asusesc8000_g4Match-
Node
asusesc8000_g4/10g_firmwareMatch1.15.4
AND
asusesc8000_g4/10gMatch-
Node
asusrs720-e9-rs12-e_firmwareMatch1.15.2
AND
asusrs720-e9-rs12-eMatch-
Node
asusws_c621e_sage_firmwareMatch1.15.1
AND
asusws_c621e_sageMatch-
Node
asusrs500a-e10-ps4_firmwareMatch1.15.2
AND
asusrs500a-e10-ps4Match-
Node
asusrs500a-e10-rs4_firmwareMatch1.15.2
AND
asusrs500a-e10-rs4Match-
Node
asusrs700a-e9-rs12v2_firmwareMatch1.15.1
AND
asusrs700a-e9-rs12v2Match-
Node
asusrs700a-e9-rs4v2_firmwareMatch1.15.1
AND
asusrs700a-e9-rs4v2Match-
Node
asusrs720a-e9-rs12v2_firmwareMatch1.15.2
AND
asusrs720a-e9-rs12v2Match-
Node
asusrs720a-e9-rs24v2_firmwareMatch1.15.1
AND
asusrs720a-e9-rs24v2Match-
Node
asusz11pr-d16_firmwareMatch1.15.3
AND
asusz11pr-d16Match-
[
  {
    "product": "BMC firmware for ASMB9-iKVM",
    "vendor": "ASUS",
    "versions": [
      {
        "status": "affected",
        "version": "1.11.12"
      }
    ]
  },
  {
    "product": "BMC firmware for RS720A-E9-RS24-E",
    "vendor": "ASUS",
    "versions": [
      {
        "status": "affected",
        "version": "1.10.3"
      }
    ]
  },
  {
    "product": "BMC firmware for RS700A-E9-RS4",
    "vendor": "ASUS",
    "versions": [
      {
        "status": "affected",
        "version": "1.10.0"
      }
    ]
  },
  {
    "product": "BMC firmware for RS700-E9-RS4",
    "vendor": "ASUS",
    "versions": [
      {
        "status": "affected",
        "version": "1.09"
      }
    ]
  },
  {
    "product": "BMC firmware for ESC4000 G4X",
    "vendor": "ASUS",
    "versions": [
      {
        "status": "affected",
        "version": "1.11.6"
      }
    ]
  },
  {
    "product": "BMC firmware for RS700-E9-RS12",
    "vendor": "ASUS",
    "versions": [
      {
        "status": "affected",
        "version": "1.11.5"
      }
    ]
  },
  {
    "product": "BMC firmware for RS100-E10-PI2",
    "vendor": "ASUS",
    "versions": [
      {
        "status": "affected",
        "version": "1.13.6"
      }
    ]
  },
  {
    "product": "BMC firmware for RS300-E10-PS4",
    "vendor": "ASUS",
    "versions": [
      {
        "status": "affected",
        "version": "1.13.6"
      }
    ]
  },
  {
    "product": "BMC firmware for RS300-E10-RS4",
    "vendor": "ASUS",
    "versions": [
      {
        "status": "affected",
        "version": "1.13.6"
      }
    ]
  },
  {
    "product": "BMC firmware for RS500A-E9-PS4",
    "vendor": "ASUS",
    "versions": [
      {
        "status": "affected",
        "version": "1.14.1"
      }
    ]
  },
  {
    "product": "BMC firmware for RS500A-E9-RS4",
    "vendor": "ASUS",
    "versions": [
      {
        "status": "affected",
        "version": "1.14.1"
      }
    ]
  },
  {
    "product": "BMC firmware for RS500A-E9 RS4",
    "vendor": "ASUS",
    "versions": [
      {
        "status": "affected",
        "version": "1.14.1"
      }
    ]
  },
  {
    "product": "BMC firmware for E700 G4",
    "vendor": "ASUS",
    "versions": [
      {
        "status": "affected",
        "version": "1.14.1"
      }
    ]
  },
  {
    "product": "BMC firmware for WS C422 PRO/SE",
    "vendor": "ASUS",
    "versions": [
      {
        "status": "affected",
        "version": "1.14.1"
      }
    ]
  },
  {
    "product": "BMC firmware for WS X299 PRO/SE",
    "vendor": "ASUS",
    "versions": [
      {
        "status": "affected",
        "version": "1.14.1"
      }
    ]
  },
  {
    "product": "BMC firmware for Z11PA-U12",
    "vendor": "ASUS",
    "versions": [
      {
        "status": "affected",
        "version": "1.15.1"
      }
    ]
  },
  {
    "product": "BMC firmware for Z11PA-U12/10G-2S",
    "vendor": "ASUS",
    "versions": [
      {
        "status": "affected",
        "version": "1.15.1"
      }
    ]
  },
  {
    "product": "BMC firmware for KNPA-U16",
    "vendor": "ASUS",
    "versions": [
      {
        "status": "affected",
        "version": "1.13.4"
      }
    ]
  },
  {
    "product": "BMC firmware for ESC4000 DHD G4",
    "vendor": "ASUS",
    "versions": [
      {
        "status": "affected",
        "version": "1.13.7"
      }
    ]
  },
  {
    "product": "BMC firmware for ESC4000 G4",
    "vendor": "ASUS",
    "versions": [
      {
        "status": "affected",
        "version": "1.15.2"
      }
    ]
  },
  {
    "product": "BMC firmware for RS720Q-E9-RS24-S",
    "vendor": "ASUS",
    "versions": [
      {
        "status": "affected",
        "version": "1.15.0"
      }
    ]
  },
  {
    "product": "BMC firmware for RS720Q-E9-RS8",
    "vendor": "ASUS",
    "versions": [
      {
        "status": "affected",
        "version": "1.15.0"
      }
    ]
  },
  {
    "product": "BMC firmware for RS720Q-E9-RS8-S",
    "vendor": "ASUS",
    "versions": [
      {
        "status": "affected",
        "version": "1.15.0"
      }
    ]
  },
  {
    "product": "BMC firmware for Z11PA-D8",
    "vendor": "ASUS",
    "versions": [
      {
        "status": "affected",
        "version": "1.14.1"
      }
    ]
  },
  {
    "product": "BMC firmware for Z11PA-D8C",
    "vendor": "ASUS",
    "versions": [
      {
        "status": "affected",
        "version": "1.14.1"
      }
    ]
  },
  {
    "product": "BMC firmware for RS720-E9-RS24-U",
    "vendor": "ASUS",
    "versions": [
      {
        "status": "affected",
        "version": "1.14.3"
      }
    ]
  },
  {
    "product": "BMC firmware for RS720-E9-RS8-G",
    "vendor": "ASUS",
    "versions": [
      {
        "status": "affected",
        "version": "1.15.2"
      }
    ]
  },
  {
    "product": "BMC firmware for RS500-E9-PS4",
    "vendor": "ASUS",
    "versions": [
      {
        "status": "affected",
        "version": "1.15.4"
      }
    ]
  },
  {
    "product": "BMC firmware for Pro E800 G4",
    "vendor": "ASUS",
    "versions": [
      {
        "status": "affected",
        "version": "1.14.2"
      }
    ]
  },
  {
    "product": "BMC firmware for RS500-E9-RS4",
    "vendor": "ASUS",
    "versions": [
      {
        "status": "affected",
        "version": "1.15.4"
      }
    ]
  },
  {
    "product": "BMC firmware for RS500-E9-RS4-U",
    "vendor": "ASUS",
    "versions": [
      {
        "status": "affected",
        "version": "1.15.4"
      }
    ]
  },
  {
    "product": "BMC firmware for RS520-E9-RS12-E",
    "vendor": "ASUS",
    "versions": [
      {
        "status": "affected",
        "version": "1.15.3"
      }
    ]
  },
  {
    "product": "BMC firmware for RS520-E9-RS8",
    "vendor": "ASUS",
    "versions": [
      {
        "status": "affected",
        "version": "1.15.3"
      }
    ]
  },
  {
    "product": "BMC firmware for ESC8000 G4",
    "vendor": "ASUS",
    "versions": [
      {
        "status": "affected",
        "version": "1.15.4"
      }
    ]
  },
  {
    "product": "BMC firmware for ESC8000 G4/10G",
    "vendor": "ASUS",
    "versions": [
      {
        "status": "affected",
        "version": "1.15.4"
      }
    ]
  },
  {
    "product": "BMC firmware for RS720-E9-RS12-E",
    "vendor": "ASUS",
    "versions": [
      {
        "status": "affected",
        "version": "1.15.2"
      }
    ]
  },
  {
    "product": "BMC firmware for WS C621E SAGE",
    "vendor": "ASUS",
    "versions": [
      {
        "status": "affected",
        "version": "1.15.1"
      }
    ]
  },
  {
    "product": "BMC firmware for RS500A-E10-PS4",
    "vendor": "ASUS",
    "versions": [
      {
        "status": "affected",
        "version": "1.15.2"
      }
    ]
  },
  {
    "product": "BMC firmware for RS500A-E10-RS4",
    "vendor": "ASUS",
    "versions": [
      {
        "status": "affected",
        "version": "1.15.2"
      }
    ]
  },
  {
    "product": "BMC firmware for RS700A-E9-RS12V2",
    "vendor": "ASUS",
    "versions": [
      {
        "status": "affected",
        "version": "1.15.1"
      }
    ]
  },
  {
    "product": "BMC firmware for RS700A-E9-RS4V2",
    "vendor": "ASUS",
    "versions": [
      {
        "status": "affected",
        "version": "1.15.1"
      }
    ]
  },
  {
    "product": "BMC firmware for RS720A-E9-RS12V2",
    "vendor": "ASUS",
    "versions": [
      {
        "status": "affected",
        "version": "1.15.2"
      }
    ]
  },
  {
    "product": "BMC firmware for RS720A-E9-RS24V2",
    "vendor": "ASUS",
    "versions": [
      {
        "status": "affected",
        "version": "1.15.1"
      }
    ]
  },
  {
    "product": "BMC firmware for Z11PR-D16",
    "vendor": "ASUS",
    "versions": [
      {
        "status": "affected",
        "version": "1.15.3"
      }
    ]
  }
]

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
21 Nov 2024 05:59Current
5.1Medium risk
Vulners AI Score5.1
CVSS 3.14.9
CVSS 26.8
EPSS0.00299
CWE-22
asusbmcfirmwareweb managementunauthorized accesssecurity vulnerabilitycve-2021-28208
64