ASUS Z11PA-U12/10G-2S FIRMWARE 1.15.1
Approved changes feed: RSS · Atom
cpe:2.3:o:asus:z11pa-u12\/10g-2s_firmware:1.15.1:*:*:*:*:*:*:*
part: o version: 1.15.1 update: *
| Vendor | Asus (8cdf1a5f-f554-5682-aa69-77df29ab6a26) |
|---|---|
| Product | Z11Pa U12/10G 2S Firmware (f9a65e44-5f7d-58a4-ac7c-4828c067f43e) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-28209 |
vulnerable | 2026-06-08 05:31:23.416459 |
ASUS BMC's firmware: path traversal - Delete video file function
MEDIUM (4.9)
The specific function in ASUS BMC’s firmware Web management page (Delete video file function) does not filter the specific parameter. As obtaining the administrator permission, remote attackers can use the means of path traversal to access system files.
Published: 2021-04-06T05:02:25.860Z
Updated: 2024-09-16T16:58:26.545Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-28208 |
vulnerable | 2026-06-08 05:31:23.407913 |
ASUS BMC's firmware: path traversal - Get video file function
MEDIUM (4.9)
The specific function in ASUS BMC’s firmware Web management page (Get video file function) does not filter the specific parameter. As obtaining the administrator permission, remote attackers can use the means of path traversal to access system files.
Published: 2021-04-06T05:02:25.088Z
Updated: 2024-09-16T22:19:36.654Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-28207 |
vulnerable | 2026-06-08 05:31:23.396416 |
ASUS BMC's firmware: path traversal - Get Help file function
MEDIUM (4.9)
The specific function in ASUS BMC’s firmware Web management page (Get Help file function) does not filter the specific parameter. As obtaining the administrator permission, remote attackers can use the means of path traversal to access system files.
Published: 2021-04-06T05:02:24.218Z
Updated: 2024-09-16T20:53:18.242Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-28206 |
vulnerable | 2026-06-08 05:31:23.386995 |
ASUS BMC's firmware: path traversal - Record video file function
MEDIUM (4.9)
The specific function in ASUS BMC’s firmware Web management page (Record video file function) does not filter the specific parameter. As obtaining the administrator permission, remote attackers can use the means of path traversal to access system files.
Published: 2021-04-06T05:02:23.403Z
Updated: 2024-09-16T20:26:15.698Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-28202 |
vulnerable | 2026-06-08 05:31:23.373989 |
ASUS BMC's firmware: buffer overflow - Service configuration-2 function
MEDIUM (4.9)
The Service configuration-2 function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.
Published: 2021-04-06T05:02:20.160Z
Updated: 2024-09-17T02:12:15.278Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-28201 |
vulnerable | 2026-06-08 05:31:23.362750 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-28200 |
vulnerable | 2026-06-08 05:31:23.349502 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-28199 |
vulnerable | 2026-06-08 05:31:23.339957 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-28198 |
vulnerable | 2026-06-08 05:31:23.331110 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-28197 |
vulnerable | 2026-06-08 05:31:23.322964 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-28196 |
vulnerable | 2026-06-08 05:31:23.311723 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-28195 |
vulnerable | 2026-06-08 05:31:23.303447 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-28194 |
vulnerable | 2026-06-08 05:31:23.294290 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-28193 |
vulnerable | 2026-06-08 05:31:23.286073 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-28192 |
vulnerable | 2026-06-08 05:31:23.269002 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-28191 |
vulnerable | 2026-06-08 05:31:23.259401 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-28190 |
vulnerable | 2026-06-08 05:31:23.215281 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.