Medium severity4.9NVD Advisory· Published Apr 6, 2021· Updated Jun 17, 2026
CVE-2021-28205
CVE-2021-28205
Description
The specific function in ASUS BMC’s firmware Web management page (Delete SOL video file function) does not filter the specific parameter. As obtaining the administrator permission, remote attackers can use the means of path traversal to access system files.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
7cpe:2.3:o:asus:z10pr-d16_firmware:1.14.51:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:asus:z10pr-d16_firmware:1.14.51:*:*:*:*:*:*:*
- (no CPE)range: 1.14.51
cpe:2.3:o:asus:asmb8-ikvm_firmware:1.14.51:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:asus:asmb8-ikvm_firmware:1.14.51:*:*:*:*:*:*:*
- (no CPE)range: 1.14.51
cpe:2.3:o:asus:z10pe-d16_ws_firmware:1.14.2:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:asus:z10pe-d16_ws_firmware:1.14.2:*:*:*:*:*:*:*
- (no CPE)range: 1.14.2
Patches
Vulnerability mechanics
References
3- www.asus.com/content/ASUS-Product-Security-Advisory/nvdVendor Advisory
- www.asus.com/tw/support/callus/nvdVendor Advisory
- www.twcert.org.tw/tw/cp-132-4575-2e32d-1.htmlnvdThird Party Advisory
News mentions
0No linked articles in our index yet.