Approved changes feed: RSS · Atom

cpe:2.3:a:asus:bmc_firmware_for_z11pr-d16:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorAsus (8cdf1a5f-f554-5682-aa69-77df29ab6a26)
ProductBmc Firmware For Z11Pr D16 (4039b5b2-34b4-567a-8188-4ea627b8ee08)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-28209 vulnerable 2026-06-08 05:31:23.414691 ASUS BMC's firmware: path traversal - Delete video file function
MEDIUM (4.9)
The specific function in ASUS BMC’s firmware Web management page (Delete video file function) does not filter the specific parameter. As obtaining the administrator permission, remote attackers can use the means of path traversal to access system files.
Published: 2021-04-06T05:02:25.860Z
Updated: 2024-09-16T16:58:26.545Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-28208 vulnerable 2026-06-08 05:31:23.405664 ASUS BMC's firmware: path traversal - Get video file function
MEDIUM (4.9)
The specific function in ASUS BMC’s firmware Web management page (Get video file function) does not filter the specific parameter. As obtaining the administrator permission, remote attackers can use the means of path traversal to access system files.
Published: 2021-04-06T05:02:25.088Z
Updated: 2024-09-16T22:19:36.654Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-28207 vulnerable 2026-06-08 05:31:23.394615 ASUS BMC's firmware: path traversal - Get Help file function
MEDIUM (4.9)
The specific function in ASUS BMC’s firmware Web management page (Get Help file function) does not filter the specific parameter. As obtaining the administrator permission, remote attackers can use the means of path traversal to access system files.
Published: 2021-04-06T05:02:24.218Z
Updated: 2024-09-16T20:53:18.242Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-28206 vulnerable 2026-06-08 05:31:23.384964 ASUS BMC's firmware: path traversal - Record video file function
MEDIUM (4.9)
The specific function in ASUS BMC’s firmware Web management page (Record video file function) does not filter the specific parameter. As obtaining the administrator permission, remote attackers can use the means of path traversal to access system files.
Published: 2021-04-06T05:02:23.403Z
Updated: 2024-09-16T20:26:15.698Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-28202 vulnerable 2026-06-08 05:31:23.370635 ASUS BMC's firmware: buffer overflow - Service configuration-2 function
MEDIUM (4.9)
The Service configuration-2 function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.
Published: 2021-04-06T05:02:20.160Z
Updated: 2024-09-17T02:12:15.278Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-28201 vulnerable 2026-06-08 05:31:23.359932 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-28200 vulnerable 2026-06-08 05:31:23.347681 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-28199 vulnerable 2026-06-08 05:31:23.338188 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-28198 vulnerable 2026-06-08 05:31:23.329496 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-28197 vulnerable 2026-06-08 05:31:23.320613 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-28196 vulnerable 2026-06-08 05:31:23.309983 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-28195 vulnerable 2026-06-08 05:31:23.301140 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-28194 vulnerable 2026-06-08 05:31:23.292521 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-28193 vulnerable 2026-06-08 05:31:23.276668 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-28192 vulnerable 2026-06-08 05:31:23.266788 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-28191 vulnerable 2026-06-08 05:31:23.257708 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-28190 vulnerable 2026-06-08 05:31:23.194455 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.