Approved changes feed: RSS · Atom

cpe:2.3:a:asus:bmc_firmware_for_rs720-e9-rs24-u:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorAsus (8cdf1a5f-f554-5682-aa69-77df29ab6a26)
ProductBmc Firmware For Rs720 E9 Rs24 U (f85a70c4-5755-508a-85db-fa7d3dd20946)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-28209 vulnerable 2026-06-08 05:31:23.413916 ASUS BMC's firmware: path traversal - Delete video file function
MEDIUM (4.9)
The specific function in ASUS BMC’s firmware Web management page (Delete video file function) does not filter the specific parameter. As obtaining the administrator permission, remote attackers can use the means of path traversal to access system files.
Published: 2021-04-06T05:02:25.860Z
Updated: 2024-09-16T16:58:26.545Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-28208 vulnerable 2026-06-08 05:31:23.404324 ASUS BMC's firmware: path traversal - Get video file function
MEDIUM (4.9)
The specific function in ASUS BMC’s firmware Web management page (Get video file function) does not filter the specific parameter. As obtaining the administrator permission, remote attackers can use the means of path traversal to access system files.
Published: 2021-04-06T05:02:25.088Z
Updated: 2024-09-16T22:19:36.654Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-28207 vulnerable 2026-06-08 05:31:23.393867 ASUS BMC's firmware: path traversal - Get Help file function
MEDIUM (4.9)
The specific function in ASUS BMC’s firmware Web management page (Get Help file function) does not filter the specific parameter. As obtaining the administrator permission, remote attackers can use the means of path traversal to access system files.
Published: 2021-04-06T05:02:24.218Z
Updated: 2024-09-16T20:53:18.242Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-28206 vulnerable 2026-06-08 05:31:23.383571 ASUS BMC's firmware: path traversal - Record video file function
MEDIUM (4.9)
The specific function in ASUS BMC’s firmware Web management page (Record video file function) does not filter the specific parameter. As obtaining the administrator permission, remote attackers can use the means of path traversal to access system files.
Published: 2021-04-06T05:02:23.403Z
Updated: 2024-09-16T20:26:15.698Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-28202 vulnerable 2026-06-08 05:31:23.369336 ASUS BMC's firmware: buffer overflow - Service configuration-2 function
MEDIUM (4.9)
The Service configuration-2 function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.
Published: 2021-04-06T05:02:20.160Z
Updated: 2024-09-17T02:12:15.278Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-28201 vulnerable 2026-06-08 05:31:23.359188 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-28200 vulnerable 2026-06-08 05:31:23.346895 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-28199 vulnerable 2026-06-08 05:31:23.337351 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-28198 vulnerable 2026-06-08 05:31:23.328604 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-28197 vulnerable 2026-06-08 05:31:23.319775 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-28196 vulnerable 2026-06-08 05:31:23.309076 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-28195 vulnerable 2026-06-08 05:31:23.299988 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-28194 vulnerable 2026-06-08 05:31:23.291538 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-28193 vulnerable 2026-06-08 05:31:23.275647 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-28192 vulnerable 2026-06-08 05:31:23.265492 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-28191 vulnerable 2026-06-08 05:31:23.256304 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-28190 vulnerable 2026-06-08 05:31:23.178278 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.