VYPR
← All advisories
Medium severity4.9NVD Advisory· Published Apr 6, 2021· Updated Jun 17, 2026

CVE-2021-28208

CVE-2021-28208

Description

The specific function in ASUS BMC’s firmware Web management page (Get video file function) does not filter the specific parameter. As obtaining the administrator permission, remote attackers can use the means of path traversal to access system files.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

89
  • Asus/Asmb9 Ikvm Firmware2 versions
    cpe:2.3:o:asus:asmb9-ikvm_firmware:1.11.12:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:asus:asmb9-ikvm_firmware:1.11.12:*:*:*:*:*:*:*
    • (no CPE)range: 1.11.12
  • Asus/Rs720a E9 Rs24 E Firmware2 versions
    cpe:2.3:o:asus:rs720a-e9-rs24-e_firmware:1.10.3:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:asus:rs720a-e9-rs24-e_firmware:1.10.3:*:*:*:*:*:*:*
    • (no CPE)range: 1.10.3
  • Asus/Rs700a E9 Rs4 Firmware2 versions
    cpe:2.3:o:asus:rs700a-e9-rs4_firmware:1.10.0:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:asus:rs700a-e9-rs4_firmware:1.10.0:*:*:*:*:*:*:*
    • (no CPE)range: 1.10.0
  • Asus/Rs700 E9 Rs4 Firmware2 versions
    cpe:2.3:o:asus:rs700-e9-rs4_firmware:1.09:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:asus:rs700-e9-rs4_firmware:1.09:*:*:*:*:*:*:*
    • (no CPE)range: 1.09
  • Asus/Esc4000 G4x Firmware2 versions
    cpe:2.3:o:asus:esc4000_g4x_firmware:1.11.6:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:asus:esc4000_g4x_firmware:1.11.6:*:*:*:*:*:*:*
    • (no CPE)range: 1.11.6
  • Asus/Rs700 E9 Rs12 Firmware2 versions
    cpe:2.3:o:asus:rs700-e9-rs12_firmware:1.11.5:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:asus:rs700-e9-rs12_firmware:1.11.5:*:*:*:*:*:*:*
    • (no CPE)range: 1.11.5
  • Asus/Rs100 E10 Pi2 Firmware2 versions
    cpe:2.3:o:asus:rs100-e10-pi2_firmware:1.13.6:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:asus:rs100-e10-pi2_firmware:1.13.6:*:*:*:*:*:*:*
    • (no CPE)range: 1.13.6
  • Asus/Rs300 E10 Ps4 Firmware2 versions
    cpe:2.3:o:asus:rs300-e10-ps4_firmware:1.13.6:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:asus:rs300-e10-ps4_firmware:1.13.6:*:*:*:*:*:*:*
    • (no CPE)range: 1.13.6
  • Asus/Rs300 E10 Rs4 Firmware2 versions
    cpe:2.3:o:asus:rs300-e10-rs4_firmware:1.13.6:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:asus:rs300-e10-rs4_firmware:1.13.6:*:*:*:*:*:*:*
    • (no CPE)range: 1.13.6
  • Asus/Rs500a E9 Ps4 Firmware2 versions
    cpe:2.3:o:asus:rs500a-e9-ps4_firmware:1.14.1:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:asus:rs500a-e9-ps4_firmware:1.14.1:*:*:*:*:*:*:*
    • (no CPE)range: 1.14.1
  • Asus/Rs500a E9 Rs4 Firmware3 versions
    cpe:2.3:o:asus:rs500a-e9-rs4_firmware:1.14.1:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:o:asus:rs500a-e9-rs4_firmware:1.14.1:*:*:*:*:*:*:*
    • (no CPE)range: 1.14.1
    • (no CPE)range: 1.14.1
  • Asus/Rs500a E9 Rs4 U Firmware
    cpe:2.3:o:asus:rs500a-e9_rs4_u_firmware:1.14.1:*:*:*:*:*:*:*
  • Asus/E700 G4 Firmware2 versions
    cpe:2.3:o:asus:e700_g4_firmware:1.14.1:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:asus:e700_g4_firmware:1.14.1:*:*:*:*:*:*:*
    • (no CPE)range: 1.14.1
  • Asus/Ws C422 Pro\/se Firmware2 versions
    cpe:2.3:o:asus:ws_c422_pro\/se_firmware:1.14.1:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:asus:ws_c422_pro\/se_firmware:1.14.1:*:*:*:*:*:*:*
    • (no CPE)range: 1.14.1
  • Asus/Ws X299 Pro\/se Firmware2 versions
    cpe:2.3:o:asus:ws_x299_pro\/se_firmware:1.14.1:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:asus:ws_x299_pro\/se_firmware:1.14.1:*:*:*:*:*:*:*
    • (no CPE)range: 1.14.1
  • Asus/Z11pa U12 Firmware2 versions
    cpe:2.3:o:asus:z11pa-u12_firmware:1.15.1:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:asus:z11pa-u12_firmware:1.15.1:*:*:*:*:*:*:*
    • (no CPE)range: 1.15.1
  • Asus/Z11pa U12\/10g 2s Firmware2 versions
    cpe:2.3:o:asus:z11pa-u12\/10g-2s_firmware:1.15.1:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:asus:z11pa-u12\/10g-2s_firmware:1.15.1:*:*:*:*:*:*:*
    • (no CPE)range: 1.15.1
  • Asus/Knpa U16 Firmware2 versions
    cpe:2.3:o:asus:knpa-u16_firmware:1.13.4:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:asus:knpa-u16_firmware:1.13.4:*:*:*:*:*:*:*
    • (no CPE)range: 1.13.4
  • Asus/Esc4000 Dhd G4 Firmware2 versions
    cpe:2.3:o:asus:esc4000_dhd_g4_firmware:1.13.7:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:asus:esc4000_dhd_g4_firmware:1.13.7:*:*:*:*:*:*:*
    • (no CPE)range: 1.13.7
  • Asus/Esc4000 G4 Firmware2 versions
    cpe:2.3:o:asus:esc4000_g4_firmware:1.15.2:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:asus:esc4000_g4_firmware:1.15.2:*:*:*:*:*:*:*
    • (no CPE)range: 1.15.2
  • Asus/Rs720q E9 Rs24 S Firmware2 versions
    cpe:2.3:o:asus:rs720q-e9-rs24-s_firmware:1.15.0:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:asus:rs720q-e9-rs24-s_firmware:1.15.0:*:*:*:*:*:*:*
    • (no CPE)range: 1.15.0
  • Asus/Rs720q E9 Rs8 Firmware2 versions
    cpe:2.3:o:asus:rs720q-e9-rs8_firmware:1.15.0:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:asus:rs720q-e9-rs8_firmware:1.15.0:*:*:*:*:*:*:*
    • (no CPE)range: 1.15.0
  • Asus/Rs720q E9 Rs8 S Firmware2 versions
    cpe:2.3:o:asus:rs720q-e9-rs8-s_firmware:1.15.0:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:asus:rs720q-e9-rs8-s_firmware:1.15.0:*:*:*:*:*:*:*
    • (no CPE)range: 1.15.0
  • Asus/Z11pa D8 Firmware2 versions
    cpe:2.3:o:asus:z11pa-d8_firmware:1.14.1:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:asus:z11pa-d8_firmware:1.14.1:*:*:*:*:*:*:*
    • (no CPE)range: 1.14.1
  • Asus/Z11pa D8c Firmware2 versions
    cpe:2.3:o:asus:z11pa-d8c_firmware:1.14.1:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:asus:z11pa-d8c_firmware:1.14.1:*:*:*:*:*:*:*
    • (no CPE)range: 1.14.1
  • Asus/Rs720 E9 Rs24 U Firmware2 versions
    cpe:2.3:o:asus:rs720-e9-rs24-u_firmware:1.14.3:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:asus:rs720-e9-rs24-u_firmware:1.14.3:*:*:*:*:*:*:*
    • (no CPE)range: 1.14.3
  • Asus/Rs720 E9 Rs8 G Firmware2 versions
    cpe:2.3:o:asus:rs720-e9-rs8-g_firmware:1.15.2:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:asus:rs720-e9-rs8-g_firmware:1.15.2:*:*:*:*:*:*:*
    • (no CPE)range: 1.15.2
  • Asus/Rs500 E9 Ps4 Firmware2 versions
    cpe:2.3:o:asus:rs500-e9-ps4_firmware:1.15.4:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:asus:rs500-e9-ps4_firmware:1.15.4:*:*:*:*:*:*:*
    • (no CPE)range: 1.15.4
  • Asus/Pro E800 G4 Firmware2 versions
    cpe:2.3:o:asus:pro_e800_g4_firmware:1.14.2:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:asus:pro_e800_g4_firmware:1.14.2:*:*:*:*:*:*:*
    • (no CPE)range: 1.14.2
  • Asus/Rs500 E9 Rs4 Firmware2 versions
    cpe:2.3:o:asus:rs500-e9-rs4_firmware:1.15.4:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:asus:rs500-e9-rs4_firmware:1.15.4:*:*:*:*:*:*:*
    • (no CPE)range: 1.15.4
  • Asus/Rs500 E9 Rs4 U Firmware2 versions
    cpe:2.3:o:asus:rs500-e9-rs4-u_firmware:1.15.4:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:asus:rs500-e9-rs4-u_firmware:1.15.4:*:*:*:*:*:*:*
    • (no CPE)range: 1.15.4
  • Asus/Rs520 E9 Rs12 E Firmware2 versions
    cpe:2.3:o:asus:rs520-e9-rs12-e_firmware:1.15.3:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:asus:rs520-e9-rs12-e_firmware:1.15.3:*:*:*:*:*:*:*
    • (no CPE)range: 1.15.3
  • Asus/Rs520 E9 Rs8 Firmware2 versions
    cpe:2.3:o:asus:rs520-e9-rs8_firmware:1.15.3:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:asus:rs520-e9-rs8_firmware:1.15.3:*:*:*:*:*:*:*
    • (no CPE)range: 1.15.3
  • Asus/Esc8000 G4 Firmware2 versions
    cpe:2.3:o:asus:esc8000_g4_firmware:1.15.4:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:asus:esc8000_g4_firmware:1.15.4:*:*:*:*:*:*:*
    • (no CPE)range: 1.15.4
  • Asus/Esc8000 G4\/10g Firmware2 versions
    cpe:2.3:o:asus:esc8000_g4\/10g_firmware:1.15.4:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:asus:esc8000_g4\/10g_firmware:1.15.4:*:*:*:*:*:*:*
    • (no CPE)range: 1.15.4
  • Asus/Rs720 E9 Rs12 E Firmware2 versions
    cpe:2.3:o:asus:rs720-e9-rs12-e_firmware:1.15.2:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:asus:rs720-e9-rs12-e_firmware:1.15.2:*:*:*:*:*:*:*
    • (no CPE)range: 1.15.2
  • Asus/Ws C621e Sage Firmware2 versions
    cpe:2.3:o:asus:ws_c621e_sage_firmware:1.15.1:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:asus:ws_c621e_sage_firmware:1.15.1:*:*:*:*:*:*:*
    • (no CPE)range: 1.15.1
  • Asus/Rs500a E10 Ps4 Firmware2 versions
    cpe:2.3:o:asus:rs500a-e10-ps4_firmware:1.15.2:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:asus:rs500a-e10-ps4_firmware:1.15.2:*:*:*:*:*:*:*
    • (no CPE)range: 1.15.2
  • Asus/Rs500a E10 Rs4 Firmware2 versions
    cpe:2.3:o:asus:rs500a-e10-rs4_firmware:1.15.2:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:asus:rs500a-e10-rs4_firmware:1.15.2:*:*:*:*:*:*:*
    • (no CPE)range: 1.15.2
  • Asus/Rs700a E9 Rs12v2 Firmware2 versions
    cpe:2.3:o:asus:rs700a-e9-rs12v2_firmware:1.15.1:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:asus:rs700a-e9-rs12v2_firmware:1.15.1:*:*:*:*:*:*:*
    • (no CPE)range: 1.15.1
  • Asus/Rs700a E9 Rs4v2 Firmware2 versions
    cpe:2.3:o:asus:rs700a-e9-rs4v2_firmware:1.15.1:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:asus:rs700a-e9-rs4v2_firmware:1.15.1:*:*:*:*:*:*:*
    • (no CPE)range: 1.15.1
  • Asus/Rs720a E9 Rs12v2 Firmware2 versions
    cpe:2.3:o:asus:rs720a-e9-rs12v2_firmware:1.15.2:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:asus:rs720a-e9-rs12v2_firmware:1.15.2:*:*:*:*:*:*:*
    • (no CPE)range: 1.15.2
  • Asus/Rs720a E9 Rs24v2 Firmware2 versions
    cpe:2.3:o:asus:rs720a-e9-rs24v2_firmware:1.15.1:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:asus:rs720a-e9-rs24v2_firmware:1.15.1:*:*:*:*:*:*:*
    • (no CPE)range: 1.15.1
  • Asus/Z11pr D16 Firmware2 versions
    cpe:2.3:o:asus:z11pr-d16_firmware:1.15.3:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:asus:z11pr-d16_firmware:1.15.3:*:*:*:*:*:*:*
    • (no CPE)range: 1.15.3
  • Asus/BMCllm-create

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.