CVE-2021-28209

moderate-risk
Published 2021-04-06

The specific function in ASUS BMC’s firmware Web management page (Delete video file function) does not filter the specific parameter. As obtaining the administrator permission, remote attackers can use the means of path traversal to access system files.

Do I need to act?

-
0.43% chance of exploitation
EPSS score — low exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
4
CVSS 4.9/10 Medium
NETWORK / LOW complexity

Affected Products (20)

Asmb9-Ikvm Firmware
Rs720A-E9-Rs24-E Firmware
Rs700A-E9-Rs4 Firmware
Rs700-E9-Rs4 Firmware
Esc4000 G4X Firmware
Rs700-E9-Rs12 Firmware
Rs100-E10-Pi2 Firmware
Rs300-E10-Ps4 Firmware
Rs300-E10-Rs4 Firmware
Rs500A-E9-Ps4 Firmware
Rs500A-E9-Rs4 Firmware
Rs500A-E9 Rs4 U Firmware
E700 G4 Firmware
Ws C422 Pro\/Se Firmware
Ws X299 Pro\/Se Firmware
Z11Pa-U12 Firmware
Z11Pa-U12\/10G-2S Firmware
Knpa-U16 Firmware
Esc4000 Dhd G4 Firmware
Esc4000 G4 Firmware

Affected Vendors

Asus

References (6)

Vendor Advisory https://www.asus.com/content/ASUS-Product-Security-Advisory/
Vendor Advisory https://www.asus.com/tw/support/callus/
Third Party Advisory https://www.twcert.org.tw/tw/cp-132-4579-c8827-1.html
Vendor Advisory https://www.asus.com/content/ASUS-Product-Security-Advisory/
Vendor Advisory https://www.asus.com/tw/support/callus/
Third Party Advisory https://www.twcert.org.tw/tw/cp-132-4579-c8827-1.html
47
/ 100
moderate-risk
Severity 20/34 · Moderate
Exploitability 2/34 · Minimal
Exposure 25/34 · High