VYPR
← All advisories
Medium severity4.9NVD Advisory· Published Apr 6, 2021· Updated Jun 17, 2026

CVE-2021-28209

CVE-2021-28209

Description

The specific function in ASUS BMC’s firmware Web management page (Delete video file function) does not filter the specific parameter. As obtaining the administrator permission, remote attackers can use the means of path traversal to access system files.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

89
  • Asus/BMCllm-create
  • Asus/Asmb9 Ikvm Firmwarecpe-rescue2 versions
    1.11.12+ 1 more
    • (no CPE)range: 1.11.12
    • cpe:2.3:o:asus:asmb9-ikvm_firmware:1.11.12:*:*:*:*:*:*:*
  • Asus/Rs720a E9 Rs24 E Firmwarecpe-rescue2 versions
    1.10.3+ 1 more
    • (no CPE)range: 1.10.3
    • cpe:2.3:o:asus:rs720a-e9-rs24-e_firmware:1.10.3:*:*:*:*:*:*:*
  • Asus/Rs700a E9 Rs4 Firmwarecpe-rescue2 versions
    1.10.0+ 1 more
    • (no CPE)range: 1.10.0
    • cpe:2.3:o:asus:rs700a-e9-rs4_firmware:1.10.0:*:*:*:*:*:*:*
  • Asus/Rs700 E9 Rs4 Firmwarecpe-rescue2 versions
    1.09+ 1 more
    • (no CPE)range: 1.09
    • cpe:2.3:o:asus:rs700-e9-rs4_firmware:1.09:*:*:*:*:*:*:*
  • Asus/Esc4000 G4x Firmwarecpe-rescue2 versions
    1.11.6+ 1 more
    • (no CPE)range: 1.11.6
    • cpe:2.3:o:asus:esc4000_g4x_firmware:1.11.6:*:*:*:*:*:*:*
  • Asus/Rs700 E9 Rs12 Firmwarecpe-rescue2 versions
    1.11.5+ 1 more
    • (no CPE)range: 1.11.5
    • cpe:2.3:o:asus:rs700-e9-rs12_firmware:1.11.5:*:*:*:*:*:*:*
  • Asus/Rs100 E10 Pi2 Firmwarecpe-rescue2 versions
    1.13.6+ 1 more
    • (no CPE)range: 1.13.6
    • cpe:2.3:o:asus:rs100-e10-pi2_firmware:1.13.6:*:*:*:*:*:*:*
  • Asus/Rs300 E10 Ps4 Firmwarecpe-rescue2 versions
    1.13.6+ 1 more
    • (no CPE)range: 1.13.6
    • cpe:2.3:o:asus:rs300-e10-ps4_firmware:1.13.6:*:*:*:*:*:*:*
  • Asus/Rs300 E10 Rs4 Firmwarecpe-rescue2 versions
    1.13.6+ 1 more
    • (no CPE)range: 1.13.6
    • cpe:2.3:o:asus:rs300-e10-rs4_firmware:1.13.6:*:*:*:*:*:*:*
  • Asus/Rs500a E9 Ps4 Firmwarecpe-rescue2 versions
    1.14.1+ 1 more
    • (no CPE)range: 1.14.1
    • cpe:2.3:o:asus:rs500a-e9-ps4_firmware:1.14.1:*:*:*:*:*:*:*
  • Asus/Rs500a E9 Rs4 Firmwarecpe-rescue3 versions
    1.14.1+ 2 more
    • (no CPE)range: 1.14.1
    • (no CPE)range: 1.14.1
    • cpe:2.3:o:asus:rs500a-e9-rs4_firmware:1.14.1:*:*:*:*:*:*:*
  • Asus/E700 G4 Firmwarecpe-rescue2 versions
    1.14.1+ 1 more
    • (no CPE)range: 1.14.1
    • cpe:2.3:o:asus:e700_g4_firmware:1.14.1:*:*:*:*:*:*:*
  • Asus/Ws C422 Pro\/se Firmwarecpe-rescue2 versions
    1.14.1+ 1 more
    • (no CPE)range: 1.14.1
    • cpe:2.3:o:asus:ws_c422_pro\/se_firmware:1.14.1:*:*:*:*:*:*:*
  • Asus/Ws X299 Pro\/se Firmwarecpe-rescue2 versions
    1.14.1+ 1 more
    • (no CPE)range: 1.14.1
    • cpe:2.3:o:asus:ws_x299_pro\/se_firmware:1.14.1:*:*:*:*:*:*:*
  • Asus/Z11pa U12 Firmwarecpe-rescue2 versions
    1.15.1+ 1 more
    • (no CPE)range: 1.15.1
    • cpe:2.3:o:asus:z11pa-u12_firmware:1.15.1:*:*:*:*:*:*:*
  • Asus/Z11pa U12\/10g 2s Firmwarecpe-rescue2 versions
    1.15.1+ 1 more
    • (no CPE)range: 1.15.1
    • cpe:2.3:o:asus:z11pa-u12\/10g-2s_firmware:1.15.1:*:*:*:*:*:*:*
  • Asus/Knpa U16 Firmwarecpe-rescue2 versions
    1.13.4+ 1 more
    • (no CPE)range: 1.13.4
    • cpe:2.3:o:asus:knpa-u16_firmware:1.13.4:*:*:*:*:*:*:*
  • Asus/Esc4000 Dhd G4 Firmwarecpe-rescue2 versions
    1.13.7+ 1 more
    • (no CPE)range: 1.13.7
    • cpe:2.3:o:asus:esc4000_dhd_g4_firmware:1.13.7:*:*:*:*:*:*:*
  • Asus/Esc4000 G4 Firmwarecpe-rescue2 versions
    1.15.2+ 1 more
    • (no CPE)range: 1.15.2
    • cpe:2.3:o:asus:esc4000_g4_firmware:1.15.2:*:*:*:*:*:*:*
  • Asus/Rs720q E9 Rs24 S Firmwarecpe-rescue2 versions
    1.15.0+ 1 more
    • (no CPE)range: 1.15.0
    • cpe:2.3:o:asus:rs720q-e9-rs24-s_firmware:1.15.0:*:*:*:*:*:*:*
  • Asus/Rs720q E9 Rs8 Firmwarecpe-rescue2 versions
    1.15.0+ 1 more
    • (no CPE)range: 1.15.0
    • cpe:2.3:o:asus:rs720q-e9-rs8_firmware:1.15.0:*:*:*:*:*:*:*
  • Asus/Rs720q E9 Rs8 S Firmwarecpe-rescue2 versions
    1.15.0+ 1 more
    • (no CPE)range: 1.15.0
    • cpe:2.3:o:asus:rs720q-e9-rs8-s_firmware:1.15.0:*:*:*:*:*:*:*
  • Asus/Z11pa D8 Firmwarecpe-rescue2 versions
    1.14.1+ 1 more
    • (no CPE)range: 1.14.1
    • cpe:2.3:o:asus:z11pa-d8_firmware:1.14.1:*:*:*:*:*:*:*
  • Asus/Rs720 E9 Rs24 U Firmwarecpe-rescue2 versions
    1.14.3+ 1 more
    • (no CPE)range: 1.14.3
    • cpe:2.3:o:asus:rs720-e9-rs24-u_firmware:1.14.3:*:*:*:*:*:*:*
  • Asus/Rs720 E9 Rs8 G Firmwarecpe-rescue2 versions
    1.15.2+ 1 more
    • (no CPE)range: 1.15.2
    • cpe:2.3:o:asus:rs720-e9-rs8-g_firmware:1.15.2:*:*:*:*:*:*:*
  • Asus/Rs500 E9 Ps4 Firmwarecpe-rescue2 versions
    1.15.4+ 1 more
    • (no CPE)range: 1.15.4
    • cpe:2.3:o:asus:rs500-e9-ps4_firmware:1.15.4:*:*:*:*:*:*:*
  • Asus/Pro E800 G4 Firmwarecpe-rescue2 versions
    1.14.2+ 1 more
    • (no CPE)range: 1.14.2
    • cpe:2.3:o:asus:pro_e800_g4_firmware:1.14.2:*:*:*:*:*:*:*
  • Asus/Rs500 E9 Rs4 Firmwarecpe-rescue2 versions
    1.15.4+ 1 more
    • (no CPE)range: 1.15.4
    • cpe:2.3:o:asus:rs500-e9-rs4_firmware:1.15.4:*:*:*:*:*:*:*
  • Asus/Rs500 E9 Rs4 U Firmwarecpe-rescue2 versions
    1.15.4+ 1 more
    • (no CPE)range: 1.15.4
    • cpe:2.3:o:asus:rs500-e9-rs4-u_firmware:1.15.4:*:*:*:*:*:*:*
  • Asus/Rs520 E9 Rs12 E Firmwarecpe-rescue2 versions
    1.15.3+ 1 more
    • (no CPE)range: 1.15.3
    • cpe:2.3:o:asus:rs520-e9-rs12-e_firmware:1.15.3:*:*:*:*:*:*:*
  • Asus/Rs520 E9 Rs8 Firmwarecpe-rescue2 versions
    1.15.3+ 1 more
    • (no CPE)range: 1.15.3
    • cpe:2.3:o:asus:rs520-e9-rs8_firmware:1.15.3:*:*:*:*:*:*:*
  • Asus/Esc8000 G4 Firmwarecpe-rescue2 versions
    1.15.4+ 1 more
    • (no CPE)range: 1.15.4
    • cpe:2.3:o:asus:esc8000_g4_firmware:1.15.4:*:*:*:*:*:*:*
  • Asus/Esc8000 G4\/10g Firmwarecpe-rescue2 versions
    1.15.4+ 1 more
    • (no CPE)range: 1.15.4
    • cpe:2.3:o:asus:esc8000_g4\/10g_firmware:1.15.4:*:*:*:*:*:*:*
  • Asus/Rs720 E9 Rs12 E Firmwarecpe-rescue2 versions
    1.15.2+ 1 more
    • (no CPE)range: 1.15.2
    • cpe:2.3:o:asus:rs720-e9-rs12-e_firmware:1.15.2:*:*:*:*:*:*:*
  • Asus/Ws C621e Sage Firmwarecpe-rescue2 versions
    1.15.1+ 1 more
    • (no CPE)range: 1.15.1
    • cpe:2.3:o:asus:ws_c621e_sage_firmware:1.15.1:*:*:*:*:*:*:*
  • Asus/Rs500a E10 Ps4 Firmwarecpe-rescue2 versions
    1.15.2+ 1 more
    • (no CPE)range: 1.15.2
    • cpe:2.3:o:asus:rs500a-e10-ps4_firmware:1.15.2:*:*:*:*:*:*:*
  • Asus/Rs500a E10 Rs4 Firmwarecpe-rescue2 versions
    1.15.2+ 1 more
    • (no CPE)range: 1.15.2
    • cpe:2.3:o:asus:rs500a-e10-rs4_firmware:1.15.2:*:*:*:*:*:*:*
  • Asus/Rs700a E9 Rs12v2 Firmwarecpe-rescue2 versions
    1.15.1+ 1 more
    • (no CPE)range: 1.15.1
    • cpe:2.3:o:asus:rs700a-e9-rs12v2_firmware:1.15.1:*:*:*:*:*:*:*
  • Asus/Rs700a E9 Rs4v2 Firmwarecpe-rescue2 versions
    1.15.1+ 1 more
    • (no CPE)range: 1.15.1
    • cpe:2.3:o:asus:rs700a-e9-rs4v2_firmware:1.15.1:*:*:*:*:*:*:*
  • Asus/Rs720a E9 Rs12v2 Firmwarecpe-rescue2 versions
    1.15.2+ 1 more
    • (no CPE)range: 1.15.2
    • cpe:2.3:o:asus:rs720a-e9-rs12v2_firmware:1.15.2:*:*:*:*:*:*:*
  • Asus/Rs720a E9 Rs24v2 Firmwarecpe-rescue2 versions
    1.15.1+ 1 more
    • (no CPE)range: 1.15.1
    • cpe:2.3:o:asus:rs720a-e9-rs24v2_firmware:1.15.1:*:*:*:*:*:*:*
  • Asus/Z11pr D16 Firmwarecpe-rescue2 versions
    1.15.3+ 1 more
    • (no CPE)range: 1.15.3
    • cpe:2.3:o:asus:z11pr-d16_firmware:1.15.3:*:*:*:*:*:*:*
  • Asus/Z11pa D8c Firmwarecpe-rescue2 versions
    1.14.1+ 1 more
    • (no CPE)range: 1.14.1
    • cpe:2.3:o:asus:z11pa-d8c_firmware:1.14.1:*:*:*:*:*:*:*
  • Asus/Rs500a E9 Rs4 U Firmware
    cpe:2.3:o:asus:rs500a-e9_rs4_u_firmware:1.14.1:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.