CVE-2021-28207
ASUS BMC's firmware: path traversal - Get Help file function
The specific function in ASUS BMC’s firmware Web management page (Get Help file function) does not filter the specific parameter. As obtaining the administrator permission, remote attackers can use the means of path traversal to access system files.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- High
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- None
- Availability
- None
Exploit likelihood
What each source reports
CVE List Score used
ASUS BMC's firmware: path traversal - Get Help file function
The specific function in ASUS BMC’s firmware Web management page (Get Help file function) does not filter the specific parameter. As obtaining the administrator permission, remote attackers can use the means of path traversal to access system files.
- Record
CVE-2021-28207- CVSS 3.1
- 4.9 Medium
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N - Weakness
- CWE-22
- Updated
- 2026-11-02
EUVDEUVD-2021-14897
The specific function in ASUS BMC’s firmware Web management page (Get Help file function) does not filter the specific parameter. As obtaining the administrator permission, remote attackers can use the means of path traversal to access system files.
- Record
EUVD-2021-14897- CVSS 3.1
- 4.9 Medium
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N - Updated
- 2026-11-03
GitHub AdvisoriesGHSA-98hm-w38p-p29q No score
The specific function in ASUS BMC’s firmware Web management page (Get Help file function) does...
The specific function in ASUS BMC’s firmware Web management page (Get Help file function) does not filter the specific parameter. As obtaining the administrator permission, remote attackers can use the means of path traversal to access system files.
- Record
GHSA-98hm-w38p-p29q- Weakness
- CWE-22
- Updated
- 2026-11-02
NVD
The specific function in ASUS BMC’s firmware Web management page (Get Help file function) does not filter the specific parameter. As obtaining the administrator permission, remote attackers can use the means of path traversal to access system files.
- Record
CVE-2021-28207- CVSS 3.1
- 4.9 Medium
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N - CVSS 2.0
- 6.8 Medium
AV:N/AC:L/Au:S/C:C/I:N/A:N - Weakness
- CWE-22
- Updated
- 2026-11-02
Affected products
- asus asmb9-ikvm firmware
- asus bmc firmware for asmb9-ikvm
- asus bmc firmware for e700 g4
- asus bmc firmware for esc4000 dhd g4
- asus bmc firmware for esc4000 g4
- asus bmc firmware for esc4000 g4x
- asus bmc firmware for esc8000 g4
- asus bmc firmware for esc8000 g4/10g
- asus bmc firmware for knpa-u16
- asus bmc firmware for pro e800 g4
- asus bmc firmware for rs100-e10-pi2
- asus bmc firmware for rs300-e10-ps4
Show 76 moreShow less
- asus bmc firmware for rs300-e10-rs4
- asus bmc firmware for rs500-e9-ps4
- asus bmc firmware for rs500-e9-rs4
- asus bmc firmware for rs500-e9-rs4-u
- asus bmc firmware for rs500a-e10-ps4
- asus bmc firmware for rs500a-e10-rs4
- asus bmc firmware for rs500a-e9 rs4
- asus bmc firmware for rs500a-e9-ps4
- asus bmc firmware for rs500a-e9-rs4
- asus bmc firmware for rs520-e9-rs12-e
- asus bmc firmware for rs520-e9-rs8
- asus bmc firmware for rs700-e9-rs12
- asus bmc firmware for rs700-e9-rs4
- asus bmc firmware for rs700a-e9-rs12v2
- asus bmc firmware for rs700a-e9-rs4
- asus bmc firmware for rs700a-e9-rs4v2
- asus bmc firmware for rs720-e9-rs12-e
- asus bmc firmware for rs720-e9-rs24-u
- asus bmc firmware for rs720-e9-rs8-g
- asus bmc firmware for rs720a-e9-rs12v2
- asus bmc firmware for rs720a-e9-rs24-e
- asus bmc firmware for rs720a-e9-rs24v2
- asus bmc firmware for rs720q-e9-rs24-s
- asus bmc firmware for rs720q-e9-rs8
- asus bmc firmware for rs720q-e9-rs8-s
- asus bmc firmware for ws c422 pro/se
- asus bmc firmware for ws c621e sage
- asus bmc firmware for ws x299 pro/se
- asus bmc firmware for z11pa-d8
- asus bmc firmware for z11pa-d8c
- asus bmc firmware for z11pa-u12
- asus bmc firmware for z11pa-u12/10g-2s
- asus bmc firmware for z11pr-d16
- asus e700 g4 firmware
- asus esc4000 dhd g4 firmware
- asus esc4000 g4 firmware
- asus esc4000 g4x firmware
- asus esc8000 g4\/10g firmware
- asus esc8000 g4 firmware
- asus knpa-u16 firmware
- asus pro e800 g4 firmware
- asus rs100-e10-pi2 firmware
- asus rs300-e10-ps4 firmware
- asus rs300-e10-rs4 firmware
- asus rs500-e9-ps4 firmware
- asus rs500-e9-rs4-u firmware
- asus rs500-e9-rs4 firmware
- asus rs500a-e10-ps4 firmware
- asus rs500a-e10-rs4 firmware
- asus rs500a-e9-ps4 firmware
- asus rs500a-e9-rs4 firmware
- asus rs500a-e9 rs4 u firmware
- asus rs520-e9-rs12-e firmware
- asus rs520-e9-rs8 firmware
- asus rs700-e9-rs12 firmware
- asus rs700-e9-rs4 firmware
- asus rs700a-e9-rs12v2 firmware
- asus rs700a-e9-rs4 firmware
- asus rs700a-e9-rs4v2 firmware
- asus rs720-e9-rs12-e firmware
- asus rs720-e9-rs24-u firmware
- asus rs720-e9-rs8-g firmware
- asus rs720a-e9-rs12v2 firmware
- asus rs720a-e9-rs24-e firmware
- asus rs720a-e9-rs24v2 firmware
- asus rs720q-e9-rs24-s firmware
- asus rs720q-e9-rs8-s firmware
- asus rs720q-e9-rs8 firmware
- asus ws c422 pro\/se firmware
- asus ws c621e sage firmware
- asus ws x299 pro\/se firmware
- asus z11pa-d8 firmware
- asus z11pa-d8c firmware
- asus z11pa-u12\/10g-2s firmware
- asus z11pa-u12 firmware
- asus z11pr-d16 firmware
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases, published | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2021-28207 is a medium vulnerability (CVSS 4.9) in Asus Asmb9-ikvm Firmware, published April 6, 2021. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.97%, the 80th percentile. No source names a fixed version.