CVE-2021-28205: ASUS BMC's firmware: path traversal - Delete SOL video file function
First published: Tue Apr 06 2021(Updated: )
The specific function in ASUS BMC’s firmware Web management page (Delete SOL video file function) does not filter the specific parameter. As obtaining the administrator permission, remote attackers can use the means of path traversal to access system files.
Credit: twcert@cert.org.tw
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Asus Z10pr-d16 Firmware | =1.14.51 | |
| Asus Z10pr-d16 | ||
| Asus Asmb8-ikvm Firmware | =1.14.51 | |
| Asus Asmb8-ikvm | ||
| Asus Z10pe-d16 Ws Firmware | =1.14.2 | |
| Asus Z10pe-d16 Ws |
Remedy
update BMC's firmwares to the following versions: Z10PR-D16 1.16.1 ASMB8-iKVM 1.16.1 Z10PE-D16 WS 1.16.1
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2021-28205?
The severity of CVE-2021-28205 is medium.
Which ASUS products are affected by CVE-2021-28205?
ASUS Z10pr-d16 Firmware version 1.14.51 and ASUS Asmb8-ikvm Firmware version 1.14.51 are affected by CVE-2021-28205.
What is the vulnerability in ASUS BMC firmware?
The vulnerability in ASUS BMC firmware is a lack of specific parameter filtering in the Delete SOL video file function, which allows remote attackers with administrator permission to access system files through path traversal.
How can remote attackers exploit CVE-2021-28205?
Remote attackers can exploit CVE-2021-28205 by using path traversal to access system files.
Are there any fixes available for CVE-2021-28205?
Please refer to the ASUS Product Security Advisory and contact ASUS support for fixes and updates.
- collector/nvd-index
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/title
- agent/weakness
- agent/last-modified-date
- agent/references
- agent/author
- agent/remedy
- agent/first-publish-date
- agent/tags
- agent/description
- agent/event
- vendor/asus
- canonical/asus z10pr-d16 firmware
- version/asus z10pr-d16 firmware/1.14.51
- canonical/asus z10pr-d16
- canonical/asus asmb8-ikvm firmware
- version/asus asmb8-ikvm firmware/1.14.51
- canonical/asus asmb8-ikvm
- canonical/asus z10pe-d16 ws firmware
- version/asus z10pe-d16 ws firmware/1.14.2
- canonical/asus z10pe-d16 ws