Approved changes feed: RSS · Atom

cpe:2.3:h:asus:asmb8-ikvm:-:*:*:*:*:*:*:*

part: h version: - update: *

VendorAsus (8cdf1a5f-f554-5682-aa69-77df29ab6a26)
ProductAsmb8 Ikvm (7cddee80-12ac-5a1c-a394-657f71ffd304)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-28205 not_vulnerable 2026-06-08 05:31:23.380440 ASUS BMC's firmware: path traversal - Delete SOL video file function
MEDIUM (4.9)
The specific function in ASUS BMC’s firmware Web management page (Delete SOL video file function) does not filter the specific parameter. As obtaining the administrator permission, remote attackers can use the means of path traversal to access system files.
Published: 2021-04-06T05:02:22.632Z
Updated: 2024-09-17T02:21:06.092Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-28204 not_vulnerable 2026-06-08 05:31:23.379274 ASUS BMC's firmware: command injection - Modify user’s information function
HIGH (7.2)
The specific function in ASUS BMC’s firmware Web management page (Modify user’s information function) does not filter the specific parameter. As obtaining the administrator permission, remote attackers can launch command injection to execute command arbitrary.
Published: 2021-04-06T05:02:21.835Z
Updated: 2024-09-17T03:38:49.311Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-28203 not_vulnerable 2026-06-08 05:31:23.378501 ASUS BMC's firmware: command injection - Web Set Media Image function
HIGH (7.2)
The Web Set Media Image function in ASUS BMC’s firmware Web management page does not filter the specific parameter. As obtaining the administrator permission, remote attackers can launch command injection to execute command arbitrary.
Published: 2021-04-06T05:02:20.959Z
Updated: 2024-09-16T23:51:25.462Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-28189 not_vulnerable 2026-06-08 05:31:23.148926 ASUS BMC's firmware: buffer overflow - SMTP configuration function
MEDIUM (4.9)
The SMTP configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.
Published: 2021-04-06T05:02:09.503Z
Updated: 2024-09-17T02:21:09.330Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-28188 not_vulnerable 2026-06-08 05:31:23.147989 ASUS BMC's firmware: buffer overflow - Modify user’s information function
MEDIUM (4.9)
The specific function in ASUS BMC’s firmware Web management page (Modify user’s information function) does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.
Published: 2021-04-06T05:02:08.812Z
Updated: 2024-09-16T16:22:42.826Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-28187 not_vulnerable 2026-06-08 05:31:23.146993 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-28186 not_vulnerable 2026-06-08 05:31:23.145957 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-28185 not_vulnerable 2026-06-08 05:31:23.144994 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-28184 not_vulnerable 2026-06-08 05:31:23.144220 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-28183 not_vulnerable 2026-06-08 05:31:23.143295 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-28182 not_vulnerable 2026-06-08 05:31:23.142242 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-28181 not_vulnerable 2026-06-08 05:31:23.141448 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-28180 not_vulnerable 2026-06-08 05:31:23.140487 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-28179 not_vulnerable 2026-06-08 05:31:23.139395 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-28178 not_vulnerable 2026-06-08 05:31:23.138363 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-28177 not_vulnerable 2026-06-08 05:31:23.137512 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-28176 not_vulnerable 2026-06-08 05:31:23.136409 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-28175 not_vulnerable 2026-06-08 05:31:23.133930 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.