https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-15T17:57:56.090141+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2021-28209 CVE-2021-28209 — ASUS BMC's firmware: path traversal - Delete video file function 2026-10-15T17:57:56.091353+00:00

Affected: ASUS BMC firmware for ASMB9-iKVM, ASUS BMC firmware for RS720A-E9-RS24-E, ASUS BMC firmware for RS700A-E9-RS4, ASUS BMC firmware for RS700-E9-RS4, ASUS BMC firmware for ESC4000 G4X, ASUS BMC firmware for RS700-E9-RS12, ASUS BMC firmware for RS100-E10-PI2, ASUS BMC firmware for RS300-E10-PS4, ASUS BMC firmware for RS300-E10-RS4, ASUS BMC firmware for RS500A-E9-PS4 and 34 more

The specific function in ASUS BMC’s firmware Web management page (Delete video file function) does not filter the specific parameter. As obtaining the administrator permission, remote attackers can use the means of path traversal to access system files.