Lucene search
+L

3 matches found

OSV
OSV
added 2021/04/06 5:15 a.m.9 views

CVE-2021-28209

The specific function in ASUS BMC’s firmware Web management page Delete video file function does not filter the specific parameter. As obtaining the administrator permission, remote attackers can use the means of path traversal to access system files...

4.9CVSS5.9AI score0.01903EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2021/04/06 5:2 a.m.32 views

CVE-2021-28209 ASUS BMC's firmware: path traversal - Delete video file function

The specific function in ASUS BMC’s firmware Web management page Delete video file function does not filter the specific parameter. As obtaining the administrator permission, remote attackers can use the means of path traversal to access system files...

4.9CVSS5.5AI score0.01903EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2021/04/06 2:48 a.m.4 views

CVE-2021-28209

The specific function in ASUS BMC’s firmware Web management page Delete video file function does not filter the specific parameter. As obtaining the administrator permission, remote attackers can use the means of path traversal to access system files...

6.8CVSS5.4AI score0.01903EPSS
SaveExploits0References4Affected Software44
Rows per page
Query Builder