Lucene search
+L

3 matches found

OSV
OSV
added 2021/04/06 5:15 a.m.6 views

CVE-2021-28208

The specific function in ASUS BMC’s firmware Web management page Get video file function does not filter the specific parameter. As obtaining the administrator permission, remote attackers can use the means of path traversal to access system files...

4.9CVSS5.9AI score0.01903EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2021/04/06 5:2 a.m.28 views

CVE-2021-28208 ASUS BMC's firmware: path traversal - Get video file function

The specific function in ASUS BMC’s firmware Web management page Get video file function does not filter the specific parameter. As obtaining the administrator permission, remote attackers can use the means of path traversal to access system files...

4.9CVSS5.5AI score0.01903EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2021/04/06 2:48 a.m.5 views

CVE-2021-28208

The specific function in ASUS BMC’s firmware Web management page Get video file function does not filter the specific parameter. As obtaining the administrator permission, remote attackers can use the means of path traversal to access system files...

6.8CVSS5.4AI score0.01903EPSS
SaveExploits0References4Affected Software44
Rows per page
Query Builder