Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 15 Oct 2026 17:57:48 +0000 CVE-2021-28209 — ASUS BMC's firmware: path traversal - Delete video file function https://cve.radiocsirt.org/vuln/cve-2021-28209 <p><strong>Affected:</strong> ASUS BMC firmware for ASMB9-iKVM, ASUS BMC firmware for RS720A-E9-RS24-E, ASUS BMC firmware for RS700A-E9-RS4, ASUS BMC firmware for RS700-E9-RS4, ASUS BMC firmware for ESC4000 G4X, ASUS BMC firmware for RS700-E9-RS12, ASUS BMC firmware for RS100-E10-PI2, ASUS BMC firmware for RS300-E10-PS4, ASUS BMC firmware for RS300-E10-RS4, ASUS BMC firmware for RS500A-E9-PS4 and 34 more</p> <p>The specific function in ASUS BMC’s firmware Web management page (Delete video file function) does not filter the specific parameter. As obtaining the administrator permission, remote attackers can use the means of path traversal to access system files.</p> <p><strong>Affected:</strong> ASUS BMC firmware for ASMB9-iKVM, ASUS BMC firmware for RS720A-E9-RS24-E, ASUS BMC firmware for RS700A-E9-RS4, ASUS BMC firmware for RS700-E9-RS4, ASUS BMC firmware for ESC4000 G4X, ASUS BMC firmware for RS700-E9-RS12, ASUS BMC firmware for RS100-E10-PI2, ASUS BMC firmware for RS300-E10-PS4, ASUS BMC firmware for RS300-E10-RS4, ASUS BMC firmware for RS500A-E9-PS4 and 34 more</p> <p>The specific function in ASUS BMC’s firmware Web management page (Delete video file function) does not filter the specific parameter. As obtaining the administrator permission, remote attackers can use the means of path traversal to access system files.</p> https://cve.radiocsirt.org/vuln/cve-2021-28209