CVE-2021-28209

CVE.org · Published

Record status: Published
Identifier year (not publication year): 2021
Source publication: Apr 6, 2021
Source updated: Sep 16, 2024
Imported by cveboard: Oct 24, 2026
Source snapshot: cve_2026-10-24_midnight_baseline · Oct 24, 2026

CNA source text (English)

ASUS BMC's firmware: path traversal - Delete video file function

The specific function in ASUS BMC’s firmware Web management page (Delete video file function) does not filter the specific parameter. As obtaining the administrator permission, remote attackers can use the means of path traversal to access system files.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

BMC firmware for ASMB9-iKVM

Vendor: ASUS
Product: BMC firmware for ASMB9-iKVM
Platforms: Unknown
Default status: Unknown

BMC firmware for ASMB9-iKVM · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1.11.12	`affected`	Unavailable	Unavailable	Unavailable	None listed

BMC firmware for RS720A-E9-RS24-E

Vendor: ASUS
Product: BMC firmware for RS720A-E9-RS24-E
Platforms: Unknown
Default status: Unknown

BMC firmware for RS720A-E9-RS24-E · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1.10.3	`affected`	Unavailable	Unavailable	Unavailable	None listed

BMC firmware for RS700A-E9-RS4

Vendor: ASUS
Product: BMC firmware for RS700A-E9-RS4
Platforms: Unknown
Default status: Unknown

BMC firmware for RS700A-E9-RS4 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1.10.0	`affected`	Unavailable	Unavailable	Unavailable	None listed

BMC firmware for RS700-E9-RS4

Vendor: ASUS
Product: BMC firmware for RS700-E9-RS4
Platforms: Unknown
Default status: Unknown

BMC firmware for RS700-E9-RS4 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1.09	`affected`	Unavailable	Unavailable	Unavailable	None listed

BMC firmware for ESC4000 G4X

Vendor: ASUS
Product: BMC firmware for ESC4000 G4X
Platforms: Unknown
Default status: Unknown

BMC firmware for ESC4000 G4X · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1.11.6	`affected`	Unavailable	Unavailable	Unavailable	None listed

BMC firmware for RS700-E9-RS12

Vendor: ASUS
Product: BMC firmware for RS700-E9-RS12
Platforms: Unknown
Default status: Unknown

BMC firmware for RS700-E9-RS12 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1.11.5	`affected`	Unavailable	Unavailable	Unavailable	None listed

BMC firmware for RS100-E10-PI2

Vendor: ASUS
Product: BMC firmware for RS100-E10-PI2
Platforms: Unknown
Default status: Unknown

BMC firmware for RS100-E10-PI2 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1.13.6	`affected`	Unavailable	Unavailable	Unavailable	None listed

BMC firmware for RS300-E10-PS4

Vendor: ASUS
Product: BMC firmware for RS300-E10-PS4
Platforms: Unknown
Default status: Unknown

BMC firmware for RS300-E10-PS4 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1.13.6	`affected`	Unavailable	Unavailable	Unavailable	None listed

BMC firmware for RS300-E10-RS4

Vendor: ASUS
Product: BMC firmware for RS300-E10-RS4
Platforms: Unknown
Default status: Unknown

BMC firmware for RS300-E10-RS4 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1.13.6	`affected`	Unavailable	Unavailable	Unavailable	None listed

BMC firmware for RS500A-E9-PS4

Vendor: ASUS
Product: BMC firmware for RS500A-E9-PS4
Platforms: Unknown
Default status: Unknown

BMC firmware for RS500A-E9-PS4 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1.14.1	`affected`	Unavailable	Unavailable	Unavailable	None listed

BMC firmware for RS500A-E9-RS4

Vendor: ASUS
Product: BMC firmware for RS500A-E9-RS4
Platforms: Unknown
Default status: Unknown

BMC firmware for RS500A-E9-RS4 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1.14.1	`affected`	Unavailable	Unavailable	Unavailable	None listed

BMC firmware for RS500A-E9 RS4

Vendor: ASUS
Product: BMC firmware for RS500A-E9 RS4
Platforms: Unknown
Default status: Unknown

BMC firmware for RS500A-E9 RS4 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1.14.1	`affected`	Unavailable	Unavailable	Unavailable	None listed

BMC firmware for E700 G4

Vendor: ASUS
Product: BMC firmware for E700 G4
Platforms: Unknown
Default status: Unknown

BMC firmware for E700 G4 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1.14.1	`affected`	Unavailable	Unavailable	Unavailable	None listed

BMC firmware for WS C422 PRO/SE

Vendor: ASUS
Product: BMC firmware for WS C422 PRO/SE
Platforms: Unknown
Default status: Unknown

BMC firmware for WS C422 PRO/SE · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1.14.1	`affected`	Unavailable	Unavailable	Unavailable	None listed

BMC firmware for WS X299 PRO/SE

Vendor: ASUS
Product: BMC firmware for WS X299 PRO/SE
Platforms: Unknown
Default status: Unknown

BMC firmware for WS X299 PRO/SE · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1.14.1	`affected`	Unavailable	Unavailable	Unavailable	None listed

BMC firmware for Z11PA-U12

Vendor: ASUS
Product: BMC firmware for Z11PA-U12
Platforms: Unknown
Default status: Unknown

BMC firmware for Z11PA-U12 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1.15.1	`affected`	Unavailable	Unavailable	Unavailable	None listed

BMC firmware for Z11PA-U12/10G-2S

Vendor: ASUS
Product: BMC firmware for Z11PA-U12/10G-2S
Platforms: Unknown
Default status: Unknown

BMC firmware for Z11PA-U12/10G-2S · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1.15.1	`affected`	Unavailable	Unavailable	Unavailable	None listed

BMC firmware for KNPA-U16

Vendor: ASUS
Product: BMC firmware for KNPA-U16
Platforms: Unknown
Default status: Unknown

BMC firmware for KNPA-U16 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1.13.4	`affected`	Unavailable	Unavailable	Unavailable	None listed

BMC firmware for ESC4000 DHD G4

Vendor: ASUS
Product: BMC firmware for ESC4000 DHD G4
Platforms: Unknown
Default status: Unknown

BMC firmware for ESC4000 DHD G4 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1.13.7	`affected`	Unavailable	Unavailable	Unavailable	None listed

BMC firmware for ESC4000 G4

Vendor: ASUS
Product: BMC firmware for ESC4000 G4
Platforms: Unknown
Default status: Unknown

BMC firmware for ESC4000 G4 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1.15.2	`affected`	Unavailable	Unavailable	Unavailable	None listed

BMC firmware for RS720Q-E9-RS24-S

Vendor: ASUS
Product: BMC firmware for RS720Q-E9-RS24-S
Platforms: Unknown
Default status: Unknown

BMC firmware for RS720Q-E9-RS24-S · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1.15.0	`affected`	Unavailable	Unavailable	Unavailable	None listed

BMC firmware for RS720Q-E9-RS8

Vendor: ASUS
Product: BMC firmware for RS720Q-E9-RS8
Platforms: Unknown
Default status: Unknown

BMC firmware for RS720Q-E9-RS8 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1.15.0	`affected`	Unavailable	Unavailable	Unavailable	None listed

BMC firmware for RS720Q-E9-RS8-S

Vendor: ASUS
Product: BMC firmware for RS720Q-E9-RS8-S
Platforms: Unknown
Default status: Unknown

BMC firmware for RS720Q-E9-RS8-S · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1.15.0	`affected`	Unavailable	Unavailable	Unavailable	None listed

BMC firmware for Z11PA-D8

Vendor: ASUS
Product: BMC firmware for Z11PA-D8
Platforms: Unknown
Default status: Unknown

BMC firmware for Z11PA-D8 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1.14.1	`affected`	Unavailable	Unavailable	Unavailable	None listed

BMC firmware for Z11PA-D8C

Vendor: ASUS
Product: BMC firmware for Z11PA-D8C
Platforms: Unknown
Default status: Unknown

BMC firmware for Z11PA-D8C · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1.14.1	`affected`	Unavailable	Unavailable	Unavailable	None listed

BMC firmware for RS720-E9-RS24-U

Vendor: ASUS
Product: BMC firmware for RS720-E9-RS24-U
Platforms: Unknown
Default status: Unknown

BMC firmware for RS720-E9-RS24-U · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1.14.3	`affected`	Unavailable	Unavailable	Unavailable	None listed

BMC firmware for RS720-E9-RS8-G

Vendor: ASUS
Product: BMC firmware for RS720-E9-RS8-G
Platforms: Unknown
Default status: Unknown

BMC firmware for RS720-E9-RS8-G · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1.15.2	`affected`	Unavailable	Unavailable	Unavailable	None listed

BMC firmware for RS500-E9-PS4

Vendor: ASUS
Product: BMC firmware for RS500-E9-PS4
Platforms: Unknown
Default status: Unknown

BMC firmware for RS500-E9-PS4 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1.15.4	`affected`	Unavailable	Unavailable	Unavailable	None listed

BMC firmware for Pro E800 G4

Vendor: ASUS
Product: BMC firmware for Pro E800 G4
Platforms: Unknown
Default status: Unknown

BMC firmware for Pro E800 G4 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1.14.2	`affected`	Unavailable	Unavailable	Unavailable	None listed

BMC firmware for RS500-E9-RS4

Vendor: ASUS
Product: BMC firmware for RS500-E9-RS4
Platforms: Unknown
Default status: Unknown

BMC firmware for RS500-E9-RS4 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1.15.4	`affected`	Unavailable	Unavailable	Unavailable	None listed

BMC firmware for RS500-E9-RS4-U

Vendor: ASUS
Product: BMC firmware for RS500-E9-RS4-U
Platforms: Unknown
Default status: Unknown

BMC firmware for RS500-E9-RS4-U · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1.15.4	`affected`	Unavailable	Unavailable	Unavailable	None listed

BMC firmware for RS520-E9-RS12-E

Vendor: ASUS
Product: BMC firmware for RS520-E9-RS12-E
Platforms: Unknown
Default status: Unknown

BMC firmware for RS520-E9-RS12-E · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1.15.3	`affected`	Unavailable	Unavailable	Unavailable	None listed

BMC firmware for RS520-E9-RS8

Vendor: ASUS
Product: BMC firmware for RS520-E9-RS8
Platforms: Unknown
Default status: Unknown

BMC firmware for RS520-E9-RS8 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1.15.3	`affected`	Unavailable	Unavailable	Unavailable	None listed

BMC firmware for ESC8000 G4

Vendor: ASUS
Product: BMC firmware for ESC8000 G4
Platforms: Unknown
Default status: Unknown

BMC firmware for ESC8000 G4 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1.15.4	`affected`	Unavailable	Unavailable	Unavailable	None listed

BMC firmware for ESC8000 G4/10G

Vendor: ASUS
Product: BMC firmware for ESC8000 G4/10G
Platforms: Unknown
Default status: Unknown

BMC firmware for ESC8000 G4/10G · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1.15.4	`affected`	Unavailable	Unavailable	Unavailable	None listed

BMC firmware for RS720-E9-RS12-E

Vendor: ASUS
Product: BMC firmware for RS720-E9-RS12-E
Platforms: Unknown
Default status: Unknown

BMC firmware for RS720-E9-RS12-E · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1.15.2	`affected`	Unavailable	Unavailable	Unavailable	None listed

BMC firmware for WS C621E SAGE

Vendor: ASUS
Product: BMC firmware for WS C621E SAGE
Platforms: Unknown
Default status: Unknown

BMC firmware for WS C621E SAGE · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1.15.1	`affected`	Unavailable	Unavailable	Unavailable	None listed

BMC firmware for RS500A-E10-PS4

Vendor: ASUS
Product: BMC firmware for RS500A-E10-PS4
Platforms: Unknown
Default status: Unknown

BMC firmware for RS500A-E10-PS4 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1.15.2	`affected`	Unavailable	Unavailable	Unavailable	None listed

BMC firmware for RS500A-E10-RS4

Vendor: ASUS
Product: BMC firmware for RS500A-E10-RS4
Platforms: Unknown
Default status: Unknown

BMC firmware for RS500A-E10-RS4 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1.15.2	`affected`	Unavailable	Unavailable	Unavailable	None listed

BMC firmware for RS700A-E9-RS12V2

Vendor: ASUS
Product: BMC firmware for RS700A-E9-RS12V2
Platforms: Unknown
Default status: Unknown

BMC firmware for RS700A-E9-RS12V2 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1.15.1	`affected`	Unavailable	Unavailable	Unavailable	None listed

BMC firmware for RS700A-E9-RS4V2

Vendor: ASUS
Product: BMC firmware for RS700A-E9-RS4V2
Platforms: Unknown
Default status: Unknown

BMC firmware for RS700A-E9-RS4V2 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1.15.1	`affected`	Unavailable	Unavailable	Unavailable	None listed

BMC firmware for RS720A-E9-RS12V2

Vendor: ASUS
Product: BMC firmware for RS720A-E9-RS12V2
Platforms: Unknown
Default status: Unknown

BMC firmware for RS720A-E9-RS12V2 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1.15.2	`affected`	Unavailable	Unavailable	Unavailable	None listed

BMC firmware for RS720A-E9-RS24V2

Vendor: ASUS
Product: BMC firmware for RS720A-E9-RS24V2
Platforms: Unknown
Default status: Unknown

BMC firmware for RS720A-E9-RS24V2 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1.15.1	`affected`	Unavailable	Unavailable	Unavailable	None listed

BMC firmware for Z11PR-D16

Vendor: ASUS
Product: BMC firmware for Z11PR-D16
Platforms: Unknown
Default status: Unknown

BMC firmware for Z11PR-D16 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1.15.3	`affected`	Unavailable	Unavailable	Unavailable	None listed