CVE-2021-28205
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2021
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
ASUS BMC's firmware: path traversal - Delete SOL video file function
The specific function in ASUS BMC’s firmware Web management page (Delete SOL video file function) does not filter the specific parameter. As obtaining the administrator permission, remote attackers can use the means of path traversal to access system files.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
BMC firmware for Z10PR-D16
- Vendor
- ASUS
- Product
- BMC firmware for Z10PR-D16
- Platforms
- Unknown
- Default status
Unknown
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 1.14.51 | affected | Unavailable | Unavailable | Unavailable | None listed |
BMC firmware for ASMB8-iKVM
- Vendor
- ASUS
- Product
- BMC firmware for ASMB8-iKVM
- Platforms
- Unknown
- Default status
Unknown
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 1.14.51 | affected | Unavailable | Unavailable | Unavailable | None listed |
BMC firmware for Z10PE-D16 WS
- Vendor
- ASUS
- Product
- BMC firmware for Z10PE-D16 WS
- Platforms
- Unknown
- Default status
Unknown
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 1.14.2 | affected | Unavailable | Unavailable | Unavailable | None listed |