Bmc Firmware For Z10Pr D16
Approved changes feed: RSS · Atom
cpe:2.3:a:asus:bmc_firmware_for_z10pr-d16:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Asus (8cdf1a5f-f554-5682-aa69-77df29ab6a26) |
|---|---|
| Product | Bmc Firmware For Z10Pr D16 (b02b4fdd-f327-5679-9009-cdcb5c087261) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-28205 |
vulnerable | 2026-06-08 05:31:23.380047 |
ASUS BMC's firmware: path traversal - Delete SOL video file function
MEDIUM (4.9)
The specific function in ASUS BMC’s firmware Web management page (Delete SOL video file function) does not filter the specific parameter. As obtaining the administrator permission, remote attackers can use the means of path traversal to access system files.
Published: 2021-04-06T05:02:22.632Z
Updated: 2024-09-17T02:21:06.092Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-28204 |
vulnerable | 2026-06-08 05:31:23.379059 |
ASUS BMC's firmware: command injection - Modify user’s information function
HIGH (7.2)
The specific function in ASUS BMC’s firmware Web management page (Modify user’s information function) does not filter the specific parameter. As obtaining the administrator permission, remote attackers can launch command injection to execute command arbitrary.
Published: 2021-04-06T05:02:21.835Z
Updated: 2024-09-17T03:38:49.311Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-28203 |
vulnerable | 2026-06-08 05:31:23.378268 |
ASUS BMC's firmware: command injection - Web Set Media Image function
HIGH (7.2)
The Web Set Media Image function in ASUS BMC’s firmware Web management page does not filter the specific parameter. As obtaining the administrator permission, remote attackers can launch command injection to execute command arbitrary.
Published: 2021-04-06T05:02:20.959Z
Updated: 2024-09-16T23:51:25.462Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-28189 |
vulnerable | 2026-06-08 05:31:23.148551 |
ASUS BMC's firmware: buffer overflow - SMTP configuration function
MEDIUM (4.9)
The SMTP configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.
Published: 2021-04-06T05:02:09.503Z
Updated: 2024-09-17T02:21:09.330Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-28188 |
vulnerable | 2026-06-08 05:31:23.147536 |
ASUS BMC's firmware: buffer overflow - Modify user’s information function
MEDIUM (4.9)
The specific function in ASUS BMC’s firmware Web management page (Modify user’s information function) does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.
Published: 2021-04-06T05:02:08.812Z
Updated: 2024-09-16T16:22:42.826Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-28187 |
vulnerable | 2026-06-08 05:31:23.146679 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-28186 |
vulnerable | 2026-06-08 05:31:23.145563 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-28185 |
vulnerable | 2026-06-08 05:31:23.144664 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-28184 |
vulnerable | 2026-06-08 05:31:23.143836 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-28183 |
vulnerable | 2026-06-08 05:31:23.142848 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-28182 |
vulnerable | 2026-06-08 05:31:23.141910 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-28181 |
vulnerable | 2026-06-08 05:31:23.141056 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-28180 |
vulnerable | 2026-06-08 05:31:23.140008 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-28179 |
vulnerable | 2026-06-08 05:31:23.138899 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-28178 |
vulnerable | 2026-06-08 05:31:23.138050 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-28177 |
vulnerable | 2026-06-08 05:31:23.137043 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-28176 |
vulnerable | 2026-06-08 05:31:23.135806 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-28175 |
vulnerable | 2026-06-08 05:31:23.129752 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.