CVE-2021-28209 — ASUS BMC's firmware: path traversal - Delete video file function
The specific function in ASUS BMC’s firmware Web management page (Delete video file function) does not filter the specific parameter. As obtaining the administrator permission, …
Published: 2021-04-06 · CVSS: 4.9 · CVSS 3.1
The specific function in ASUS BMC’s firmware Web management page (Delete video file function) does not filter the specific parameter. As obtaining the administrator permission, remote attackers can use the means of path traversal to access system files.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7