Approved changes feed: RSS · Atom

cpe:2.3:o:asus:rs520-e9-rs8_firmware:1.15.3:*:*:*:*:*:*:*

part: o version: 1.15.3 update: *

VendorAsus (8cdf1a5f-f554-5682-aa69-77df29ab6a26)
ProductRs520 E9 Rs8 Firmware (d658b0c1-04be-568a-a00b-c05437ef6be1)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-28209 vulnerable 2026-06-08 05:31:23.420225 ASUS BMC's firmware: path traversal - Delete video file function
MEDIUM (4.9)
The specific function in ASUS BMC’s firmware Web management page (Delete video file function) does not filter the specific parameter. As obtaining the administrator permission, remote attackers can use the means of path traversal to access system files.
Published: 2021-04-06T05:02:25.860Z
Updated: 2024-09-16T16:58:26.545Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-28208 vulnerable 2026-06-08 05:31:23.409297 ASUS BMC's firmware: path traversal - Get video file function
MEDIUM (4.9)
The specific function in ASUS BMC’s firmware Web management page (Get video file function) does not filter the specific parameter. As obtaining the administrator permission, remote attackers can use the means of path traversal to access system files.
Published: 2021-04-06T05:02:25.088Z
Updated: 2024-09-16T22:19:36.654Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-28207 vulnerable 2026-06-08 05:31:23.398333 ASUS BMC's firmware: path traversal - Get Help file function
MEDIUM (4.9)
The specific function in ASUS BMC’s firmware Web management page (Get Help file function) does not filter the specific parameter. As obtaining the administrator permission, remote attackers can use the means of path traversal to access system files.
Published: 2021-04-06T05:02:24.218Z
Updated: 2024-09-16T20:53:18.242Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-28206 vulnerable 2026-06-08 05:31:23.389240 ASUS BMC's firmware: path traversal - Record video file function
MEDIUM (4.9)
The specific function in ASUS BMC’s firmware Web management page (Record video file function) does not filter the specific parameter. As obtaining the administrator permission, remote attackers can use the means of path traversal to access system files.
Published: 2021-04-06T05:02:23.403Z
Updated: 2024-09-16T20:26:15.698Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-28202 vulnerable 2026-06-08 05:31:23.375501 ASUS BMC's firmware: buffer overflow - Service configuration-2 function
MEDIUM (4.9)
The Service configuration-2 function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.
Published: 2021-04-06T05:02:20.160Z
Updated: 2024-09-17T02:12:15.278Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-28201 vulnerable 2026-06-08 05:31:23.364653 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-28200 vulnerable 2026-06-08 05:31:23.354507 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-28199 vulnerable 2026-06-08 05:31:23.342098 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-28198 vulnerable 2026-06-08 05:31:23.333079 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-28197 vulnerable 2026-06-08 05:31:23.324445 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-28196 vulnerable 2026-06-08 05:31:23.315253 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-28195 vulnerable 2026-06-08 05:31:23.305079 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-28194 vulnerable 2026-06-08 05:31:23.295738 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-28193 vulnerable 2026-06-08 05:31:23.287783 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-28192 vulnerable 2026-06-08 05:31:23.270959 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-28191 vulnerable 2026-06-08 05:31:23.261325 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-28190 vulnerable 2026-06-08 05:31:23.237909 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.