CVE-2021-28204

The CVE concerns ASUS BMC firmware: the Web management page’s Modify user’s information function does not filter a specific parameter, enabling remote command injection when an administrator token is compromised. Affected: ASUS BMC firmware Web Management page; Vulnerable component: Modify user’s...