Approved changes feed: RSS · Atom

cpe:2.3:o:asus:rs720q-e9-rs24-s_firmware:1.15.0:*:*:*:*:*:*:*

part: o version: 1.15.0 update: *

VendorAsus (8cdf1a5f-f554-5682-aa69-77df29ab6a26)
ProductRs720Q E9 Rs24 S Firmware (46f6363f-c47a-5926-8389-7ae84f2b2a08)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-28209 vulnerable 2026-06-08 05:31:23.416825 ASUS BMC's firmware: path traversal - Delete video file function
MEDIUM (4.9)
The specific function in ASUS BMC’s firmware Web management page (Delete video file function) does not filter the specific parameter. As obtaining the administrator permission, remote attackers can use the means of path traversal to access system files.
Published: 2021-04-06T05:02:25.860Z
Updated: 2024-09-16T16:58:26.545Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-28208 vulnerable 2026-06-08 05:31:23.408276 ASUS BMC's firmware: path traversal - Get video file function
MEDIUM (4.9)
The specific function in ASUS BMC’s firmware Web management page (Get video file function) does not filter the specific parameter. As obtaining the administrator permission, remote attackers can use the means of path traversal to access system files.
Published: 2021-04-06T05:02:25.088Z
Updated: 2024-09-16T22:19:36.654Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-28207 vulnerable 2026-06-08 05:31:23.396729 ASUS BMC's firmware: path traversal - Get Help file function
MEDIUM (4.9)
The specific function in ASUS BMC’s firmware Web management page (Get Help file function) does not filter the specific parameter. As obtaining the administrator permission, remote attackers can use the means of path traversal to access system files.
Published: 2021-04-06T05:02:24.218Z
Updated: 2024-09-16T20:53:18.242Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-28206 vulnerable 2026-06-08 05:31:23.387555 ASUS BMC's firmware: path traversal - Record video file function
MEDIUM (4.9)
The specific function in ASUS BMC’s firmware Web management page (Record video file function) does not filter the specific parameter. As obtaining the administrator permission, remote attackers can use the means of path traversal to access system files.
Published: 2021-04-06T05:02:23.403Z
Updated: 2024-09-16T20:26:15.698Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-28202 vulnerable 2026-06-08 05:31:23.374356 ASUS BMC's firmware: buffer overflow - Service configuration-2 function
MEDIUM (4.9)
The Service configuration-2 function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.
Published: 2021-04-06T05:02:20.160Z
Updated: 2024-09-17T02:12:15.278Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-28201 vulnerable 2026-06-08 05:31:23.363139 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-28200 vulnerable 2026-06-08 05:31:23.350405 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-28199 vulnerable 2026-06-08 05:31:23.340582 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-28198 vulnerable 2026-06-08 05:31:23.331401 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-28197 vulnerable 2026-06-08 05:31:23.323279 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-28196 vulnerable 2026-06-08 05:31:23.312203 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-28195 vulnerable 2026-06-08 05:31:23.303791 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-28194 vulnerable 2026-06-08 05:31:23.294498 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-28193 vulnerable 2026-06-08 05:31:23.286485 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-28192 vulnerable 2026-06-08 05:31:23.269469 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-28191 vulnerable 2026-06-08 05:31:23.259836 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-28190 vulnerable 2026-06-08 05:31:23.219633 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.