ASUS BMC's firmware: path traversal - Get Help file function
Priority LOW 26CWE-22Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- High
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Information disclosure
- Confidentiality · integrity · availability
- High · None · None
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-22 and the CVSS impact.
Summary
The specific function in ASUS BMC’s firmware Web management page (Get Help file function) does not filter the specific parameter. As obtaining the administrator permission, remote attackers can use the means of path traversal to access system files.
Why it matters now
EPSS 0.0197 80th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| ASUS | BMC firmware for ASMB9-iKVM | 1.11.12 | — | No fix listed | CNA |
| ASUS | BMC firmware for RS720A-E9-RS24-E | 1.10.3 | — | No fix listed | CNA |
| ASUS | BMC firmware for RS700A-E9-RS4 | 1.10.0 | — | No fix listed | CNA |
| ASUS | BMC firmware for RS700-E9-RS4 | 1.09 | — | No fix listed | CNA |
| ASUS | BMC firmware for ESC4000 G4X | 1.11.6 | — | No fix listed | CNA |
| ASUS | BMC firmware for RS700-E9-RS12 | 1.11.5 | — | No fix listed | CNA |
| ASUS | BMC firmware for RS100-E10-PI2 | 1.13.6 | — | No fix listed | CNA |
| ASUS | BMC firmware for RS300-E10-PS4 | 1.13.6 | — | No fix listed | CNA |
| ASUS | BMC firmware for RS300-E10-RS4 | 1.13.6 | — | No fix listed | CNA |
| ASUS | BMC firmware for RS500A-E9-PS4 | 1.14.1 | — | No fix listed | CNA |
| ASUS | BMC firmware for RS500A-E9-RS4 | 1.14.1 | — | No fix listed | CNA |
| ASUS | BMC firmware for RS500A-E9 RS4 | 1.14.1 | — | No fix listed | CNA |
| ASUS | BMC firmware for E700 G4 | 1.14.1 | — | No fix listed | CNA |
| ASUS | BMC firmware for WS C422 PRO/SE | 1.14.1 | — | No fix listed | CNA |
| ASUS | BMC firmware for WS X299 PRO/SE | 1.14.1 | — | No fix listed | CNA |
| ASUS | BMC firmware for Z11PA-U12 | 1.15.1 | — | No fix listed | CNA |
| ASUS | BMC firmware for Z11PA-U12/10G-2S | 1.15.1 | — | No fix listed | CNA |
| ASUS | BMC firmware for KNPA-U16 | 1.13.4 | — | No fix listed | CNA |
| ASUS | BMC firmware for ESC4000 DHD G4 | 1.13.7 | — | No fix listed | CNA |
| ASUS | BMC firmware for ESC4000 G4 | 1.15.2 | — | No fix listed | CNA |
| ASUS | BMC firmware for RS720Q-E9-RS24-S | 1.15.0 | — | No fix listed | CNA |
| ASUS | BMC firmware for RS720Q-E9-RS8 | 1.15.0 | — | No fix listed | CNA |
| ASUS | BMC firmware for RS720Q-E9-RS8-S | 1.15.0 | — | No fix listed | CNA |
| ASUS | BMC firmware for Z11PA-D8 | 1.14.1 | — | No fix listed | CNA |
| ASUS | BMC firmware for Z11PA-D8C | 1.14.1 | — | No fix listed | CNA |
| ASUS | BMC firmware for RS720-E9-RS24-U | 1.14.3 | — | No fix listed | CNA |
| ASUS | BMC firmware for RS720-E9-RS8-G | 1.15.2 | — | No fix listed | CNA |
| ASUS | BMC firmware for RS500-E9-PS4 | 1.15.4 | — | No fix listed | CNA |
| ASUS | BMC firmware for Pro E800 G4 | 1.14.2 | — | No fix listed | CNA |
| ASUS | BMC firmware for RS500-E9-RS4 | 1.15.4 | — | No fix listed | CNA |
| ASUS | BMC firmware for RS500-E9-RS4-U | 1.15.4 | — | No fix listed | CNA |
| ASUS | BMC firmware for RS520-E9-RS12-E | 1.15.3 | — | No fix listed | CNA |
| ASUS | BMC firmware for RS520-E9-RS8 | 1.15.3 | — | No fix listed | CNA |
| ASUS | BMC firmware for ESC8000 G4 | 1.15.4 | — | No fix listed | CNA |
| ASUS | BMC firmware for ESC8000 G4/10G | 1.15.4 | — | No fix listed | CNA |
| ASUS | BMC firmware for RS720-E9-RS12-E | 1.15.2 | — | No fix listed | CNA |
| ASUS | BMC firmware for WS C621E SAGE | 1.15.1 | — | No fix listed | CNA |
| ASUS | BMC firmware for RS500A-E10-PS4 | 1.15.2 | — | No fix listed | CNA |
| ASUS | BMC firmware for RS500A-E10-RS4 | 1.15.2 | — | No fix listed | CNA |
| ASUS | BMC firmware for RS700A-E9-RS12V2 | 1.15.1 | — | No fix listed | CNA |
| ASUS | BMC firmware for RS700A-E9-RS4V2 | 1.15.1 | — | No fix listed | CNA |
| ASUS | BMC firmware for RS720A-E9-RS12V2 | 1.15.2 | — | No fix listed | CNA |
| ASUS | BMC firmware for RS720A-E9-RS24V2 | 1.15.1 | — | No fix listed | CNA |
| ASUS | BMC firmware for Z11PR-D16 | 1.15.3 | — | No fix listed | CNA |
- BMC firmware for ASMB9-iKVM VendorASUS Affected 1.11.12 Fixed in — No fix listed CNA
- BMC firmware for RS720A-E9-RS24-E VendorASUS Affected 1.10.3 Fixed in — No fix listed CNA
- BMC firmware for RS700A-E9-RS4 VendorASUS Affected 1.10.0 Fixed in — No fix listed CNA
- BMC firmware for RS700-E9-RS4 VendorASUS Affected 1.09 Fixed in — No fix listed CNA
- BMC firmware for ESC4000 G4X VendorASUS Affected 1.11.6 Fixed in — No fix listed CNA
- BMC firmware for RS700-E9-RS12 VendorASUS Affected 1.11.5 Fixed in — No fix listed CNA
- BMC firmware for RS100-E10-PI2 VendorASUS Affected 1.13.6 Fixed in — No fix listed CNA
- BMC firmware for RS300-E10-PS4 VendorASUS Affected 1.13.6 Fixed in — No fix listed CNA
- BMC firmware for RS300-E10-RS4 VendorASUS Affected 1.13.6 Fixed in — No fix listed CNA
- BMC firmware for RS500A-E9-PS4 VendorASUS Affected 1.14.1 Fixed in — No fix listed CNA
- BMC firmware for RS500A-E9-RS4 VendorASUS Affected 1.14.1 Fixed in — No fix listed CNA
- BMC firmware for RS500A-E9 RS4 VendorASUS Affected 1.14.1 Fixed in — No fix listed CNA
- BMC firmware for E700 G4 VendorASUS Affected 1.14.1 Fixed in — No fix listed CNA
- BMC firmware for WS C422 PRO/SE VendorASUS Affected 1.14.1 Fixed in — No fix listed CNA
- BMC firmware for WS X299 PRO/SE VendorASUS Affected 1.14.1 Fixed in — No fix listed CNA
- BMC firmware for Z11PA-U12 VendorASUS Affected 1.15.1 Fixed in — No fix listed CNA
- BMC firmware for Z11PA-U12/10G-2S VendorASUS Affected 1.15.1 Fixed in — No fix listed CNA
- BMC firmware for KNPA-U16 VendorASUS Affected 1.13.4 Fixed in — No fix listed CNA
- BMC firmware for ESC4000 DHD G4 VendorASUS Affected 1.13.7 Fixed in — No fix listed CNA
- BMC firmware for ESC4000 G4 VendorASUS Affected 1.15.2 Fixed in — No fix listed CNA
- BMC firmware for RS720Q-E9-RS24-S VendorASUS Affected 1.15.0 Fixed in — No fix listed CNA
- BMC firmware for RS720Q-E9-RS8 VendorASUS Affected 1.15.0 Fixed in — No fix listed CNA
- BMC firmware for RS720Q-E9-RS8-S VendorASUS Affected 1.15.0 Fixed in — No fix listed CNA
- BMC firmware for Z11PA-D8 VendorASUS Affected 1.14.1 Fixed in — No fix listed CNA
- BMC firmware for Z11PA-D8C VendorASUS Affected 1.14.1 Fixed in — No fix listed CNA
- BMC firmware for RS720-E9-RS24-U VendorASUS Affected 1.14.3 Fixed in — No fix listed CNA
- BMC firmware for RS720-E9-RS8-G VendorASUS Affected 1.15.2 Fixed in — No fix listed CNA
- BMC firmware for RS500-E9-PS4 VendorASUS Affected 1.15.4 Fixed in — No fix listed CNA
- BMC firmware for Pro E800 G4 VendorASUS Affected 1.14.2 Fixed in — No fix listed CNA
- BMC firmware for RS500-E9-RS4 VendorASUS Affected 1.15.4 Fixed in — No fix listed CNA
- BMC firmware for RS500-E9-RS4-U VendorASUS Affected 1.15.4 Fixed in — No fix listed CNA
- BMC firmware for RS520-E9-RS12-E VendorASUS Affected 1.15.3 Fixed in — No fix listed CNA
- BMC firmware for RS520-E9-RS8 VendorASUS Affected 1.15.3 Fixed in — No fix listed CNA
- BMC firmware for ESC8000 G4 VendorASUS Affected 1.15.4 Fixed in — No fix listed CNA
- BMC firmware for ESC8000 G4/10G VendorASUS Affected 1.15.4 Fixed in — No fix listed CNA
- BMC firmware for RS720-E9-RS12-E VendorASUS Affected 1.15.2 Fixed in — No fix listed CNA
- BMC firmware for WS C621E SAGE VendorASUS Affected 1.15.1 Fixed in — No fix listed CNA
- BMC firmware for RS500A-E10-PS4 VendorASUS Affected 1.15.2 Fixed in — No fix listed CNA
- BMC firmware for RS500A-E10-RS4 VendorASUS Affected 1.15.2 Fixed in — No fix listed CNA
- BMC firmware for RS700A-E9-RS12V2 VendorASUS Affected 1.15.1 Fixed in — No fix listed CNA
- BMC firmware for RS700A-E9-RS4V2 VendorASUS Affected 1.15.1 Fixed in — No fix listed CNA
- BMC firmware for RS720A-E9-RS12V2 VendorASUS Affected 1.15.2 Fixed in — No fix listed CNA
- BMC firmware for RS720A-E9-RS24V2 VendorASUS Affected 1.15.1 Fixed in — No fix listed CNA
- BMC firmware for Z11PR-D16 VendorASUS Affected 1.15.3 Fixed in — No fix listed CNA
CPE configurations NVD · 88
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:asus:asmb9-ikvm_firmware:1.11.12:*:*:*:*:*:*:* | 1.11.12 | Vulnerable | ASUS |
| cpe:2.3:h:asus:asmb9-ikvm:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:o:asus:rs720a-e9-rs24-e_firmware:1.10.3:*:*:*:*:*:*:* | 1.10.3 | Vulnerable | ASUS |
| cpe:2.3:h:asus:rs720a-e9-rs24-e:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:o:asus:rs700a-e9-rs4_firmware:1.10.0:*:*:*:*:*:*:* | 1.10.0 | Vulnerable | ASUS |
| cpe:2.3:h:asus:rs700a-e9-rs4:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:o:asus:rs700-e9-rs4_firmware:1.09:*:*:*:*:*:*:* | 1.09 | Vulnerable | ASUS |
| cpe:2.3:h:asus:rs700-e9-rs4:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:o:asus:esc4000_g4x_firmware:1.11.6:*:*:*:*:*:*:* | 1.11.6 | Vulnerable | ASUS |
| cpe:2.3:h:asus:esc4000_g4x:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
- cpe:2.3:o:asus:asmb9-ikvm_firmware:1.11.12:*:*:*:*:*:*:* Versions 1.11.12 Vulnerable ·ASUS
- cpe:2.3:h:asus:asmb9-ikvm:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:o:asus:rs720a-e9-rs24-e_firmware:1.10.3:*:*:*:*:*:*:* Versions 1.10.3 Vulnerable ·ASUS
- cpe:2.3:h:asus:rs720a-e9-rs24-e:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:o:asus:rs700a-e9-rs4_firmware:1.10.0:*:*:*:*:*:*:* Versions 1.10.0 Vulnerable ·ASUS
- cpe:2.3:h:asus:rs700a-e9-rs4:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:o:asus:rs700-e9-rs4_firmware:1.09:*:*:*:*:*:*:* Versions 1.09 Vulnerable ·ASUS
- cpe:2.3:h:asus:rs700-e9-rs4:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:o:asus:esc4000_g4x_firmware:1.11.6:*:*:*:*:*:*:* Versions 1.11.6 Vulnerable ·ASUS
- cpe:2.3:h:asus:esc4000_g4x:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
Show 78 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:asus:rs700-e9-rs12_firmware:1.11.5:*:*:*:*:*:*:* | 1.11.5 | Vulnerable | ASUS |
| cpe:2.3:h:asus:rs700-e9-rs12:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:o:asus:rs100-e10-pi2_firmware:1.13.6:*:*:*:*:*:*:* | 1.13.6 | Vulnerable | ASUS |
| cpe:2.3:h:asus:rs100-e10-pi2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:o:asus:rs300-e10-ps4_firmware:1.13.6:*:*:*:*:*:*:* | 1.13.6 | Vulnerable | ASUS |
| cpe:2.3:h:asus:rs300-e10-ps4:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:o:asus:rs300-e10-rs4_firmware:1.13.6:*:*:*:*:*:*:* | 1.13.6 | Vulnerable | ASUS |
| cpe:2.3:h:asus:rs300-e10-rs4:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:o:asus:rs500a-e9-ps4_firmware:1.14.1:*:*:*:*:*:*:* | 1.14.1 | Vulnerable | ASUS |
| cpe:2.3:h:asus:rs500a-e9-ps4:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:o:asus:rs500a-e9-rs4_firmware:1.14.1:*:*:*:*:*:*:* | 1.14.1 | Vulnerable | ASUS |
| cpe:2.3:h:asus:rs500a-e9-rs4:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:o:asus:rs500a-e9_rs4_u_firmware:1.14.1:*:*:*:*:*:*:* | 1.14.1 | Vulnerable | ASUS |
| cpe:2.3:h:asus:rs500a-e9_rs4_u:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:o:asus:e700_g4_firmware:1.14.1:*:*:*:*:*:*:* | 1.14.1 | Vulnerable | ASUS |
| cpe:2.3:h:asus:e700_g4:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:o:asus:ws_c422_pro\/se_firmware:1.14.1:*:*:*:*:*:*:* | 1.14.1 | Vulnerable | ASUS |
| cpe:2.3:h:asus:ws_c422_pro\/se:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:o:asus:ws_x299_pro\/se_firmware:1.14.1:*:*:*:*:*:*:* | 1.14.1 | Vulnerable | ASUS |
| cpe:2.3:h:asus:ws_x299_pro\/se:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:o:asus:z11pa-u12_firmware:1.15.1:*:*:*:*:*:*:* | 1.15.1 | Vulnerable | ASUS |
| cpe:2.3:h:asus:z11pa-u12:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:o:asus:z11pa-u12\/10g-2s_firmware:1.15.1:*:*:*:*:*:*:* | 1.15.1 | Vulnerable | ASUS |
| cpe:2.3:h:asus:z11pa-u12\/10g-2s:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:o:asus:knpa-u16_firmware:1.13.4:*:*:*:*:*:*:* | 1.13.4 | Vulnerable | ASUS |
| cpe:2.3:h:asus:knpa-u16:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:o:asus:esc4000_dhd_g4_firmware:1.13.7:*:*:*:*:*:*:* | 1.13.7 | Vulnerable | ASUS |
| cpe:2.3:h:asus:esc4000_dhd_g4:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:o:asus:esc4000_g4_firmware:1.15.2:*:*:*:*:*:*:* | 1.15.2 | Vulnerable | ASUS |
| cpe:2.3:h:asus:esc4000_g4:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:o:asus:rs720q-e9-rs24-s_firmware:1.15.0:*:*:*:*:*:*:* | 1.15.0 | Vulnerable | ASUS |
| cpe:2.3:h:asus:rs720q-e9-rs24-s:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:o:asus:rs720q-e9-rs8_firmware:1.15.0:*:*:*:*:*:*:* | 1.15.0 | Vulnerable | ASUS |
| cpe:2.3:h:asus:rs720q-e9-rs8:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:o:asus:rs720q-e9-rs8-s_firmware:1.15.0:*:*:*:*:*:*:* | 1.15.0 | Vulnerable | ASUS |
| cpe:2.3:h:asus:rs720q-e9-rs8-s:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:o:asus:z11pa-d8_firmware:1.14.1:*:*:*:*:*:*:* | 1.14.1 | Vulnerable | ASUS |
| cpe:2.3:h:asus:z11pa-d8:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:o:asus:z11pa-d8c_firmware:1.14.1:*:*:*:*:*:*:* | 1.14.1 | Vulnerable | ASUS |
| cpe:2.3:h:asus:z11pa-d8c:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:o:asus:rs720-e9-rs24-u_firmware:1.14.3:*:*:*:*:*:*:* | 1.14.3 | Vulnerable | ASUS |
| cpe:2.3:h:asus:rs720-e9-rs24-u:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:o:asus:rs720-e9-rs8-g_firmware:1.15.2:*:*:*:*:*:*:* | 1.15.2 | Vulnerable | ASUS |
| cpe:2.3:h:asus:rs720-e9-rs8-g:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:o:asus:rs500-e9-ps4_firmware:1.15.4:*:*:*:*:*:*:* | 1.15.4 | Vulnerable | ASUS |
| cpe:2.3:h:asus:rs500-e9-ps4:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:o:asus:pro_e800_g4_firmware:1.14.2:*:*:*:*:*:*:* | 1.14.2 | Vulnerable | ASUS |
| cpe:2.3:h:asus:pro_e800_g4:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:o:asus:rs500-e9-rs4_firmware:1.15.4:*:*:*:*:*:*:* | 1.15.4 | Vulnerable | ASUS |
| cpe:2.3:h:asus:rs500-e9-rs4:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:o:asus:rs500-e9-rs4-u_firmware:1.15.4:*:*:*:*:*:*:* | 1.15.4 | Vulnerable | ASUS |
| cpe:2.3:h:asus:rs500-e9-rs4-u:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:o:asus:rs520-e9-rs12-e_firmware:1.15.3:*:*:*:*:*:*:* | 1.15.3 | Vulnerable | ASUS |
| cpe:2.3:h:asus:rs520-e9-rs12-e:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:o:asus:rs520-e9-rs8_firmware:1.15.3:*:*:*:*:*:*:* | 1.15.3 | Vulnerable | ASUS |
| cpe:2.3:h:asus:rs520-e9-rs8:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:o:asus:esc8000_g4_firmware:1.15.4:*:*:*:*:*:*:* | 1.15.4 | Vulnerable | ASUS |
| cpe:2.3:h:asus:esc8000_g4:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:o:asus:esc8000_g4\/10g_firmware:1.15.4:*:*:*:*:*:*:* | 1.15.4 | Vulnerable | ASUS |
| cpe:2.3:h:asus:esc8000_g4\/10g:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:o:asus:rs720-e9-rs12-e_firmware:1.15.2:*:*:*:*:*:*:* | 1.15.2 | Vulnerable | ASUS |
| cpe:2.3:h:asus:rs720-e9-rs12-e:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:o:asus:ws_c621e_sage_firmware:1.15.1:*:*:*:*:*:*:* | 1.15.1 | Vulnerable | ASUS |
| cpe:2.3:h:asus:ws_c621e_sage:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:o:asus:rs500a-e10-ps4_firmware:1.15.2:*:*:*:*:*:*:* | 1.15.2 | Vulnerable | ASUS |
| cpe:2.3:h:asus:rs500a-e10-ps4:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:o:asus:rs500a-e10-rs4_firmware:1.15.2:*:*:*:*:*:*:* | 1.15.2 | Vulnerable | ASUS |
| cpe:2.3:h:asus:rs500a-e10-rs4:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:o:asus:rs700a-e9-rs12v2_firmware:1.15.1:*:*:*:*:*:*:* | 1.15.1 | Vulnerable | ASUS |
| cpe:2.3:h:asus:rs700a-e9-rs12v2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:o:asus:rs700a-e9-rs4v2_firmware:1.15.1:*:*:*:*:*:*:* | 1.15.1 | Vulnerable | ASUS |
| cpe:2.3:h:asus:rs700a-e9-rs4v2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:o:asus:rs720a-e9-rs12v2_firmware:1.15.2:*:*:*:*:*:*:* | 1.15.2 | Vulnerable | ASUS |
| cpe:2.3:h:asus:rs720a-e9-rs12v2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:o:asus:rs720a-e9-rs24v2_firmware:1.15.1:*:*:*:*:*:*:* | 1.15.1 | Vulnerable | ASUS |
| cpe:2.3:h:asus:rs720a-e9-rs24v2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:o:asus:z11pr-d16_firmware:1.15.3:*:*:*:*:*:*:* | 1.15.3 | Vulnerable | ASUS |
| cpe:2.3:h:asus:z11pr-d16:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
- cpe:2.3:o:asus:rs700-e9-rs12_firmware:1.11.5:*:*:*:*:*:*:* Versions 1.11.5 Vulnerable ·ASUS
- cpe:2.3:h:asus:rs700-e9-rs12:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:o:asus:rs100-e10-pi2_firmware:1.13.6:*:*:*:*:*:*:* Versions 1.13.6 Vulnerable ·ASUS
- cpe:2.3:h:asus:rs100-e10-pi2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:o:asus:rs300-e10-ps4_firmware:1.13.6:*:*:*:*:*:*:* Versions 1.13.6 Vulnerable ·ASUS
- cpe:2.3:h:asus:rs300-e10-ps4:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:o:asus:rs300-e10-rs4_firmware:1.13.6:*:*:*:*:*:*:* Versions 1.13.6 Vulnerable ·ASUS
- cpe:2.3:h:asus:rs300-e10-rs4:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:o:asus:rs500a-e9-ps4_firmware:1.14.1:*:*:*:*:*:*:* Versions 1.14.1 Vulnerable ·ASUS
- cpe:2.3:h:asus:rs500a-e9-ps4:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:o:asus:rs500a-e9-rs4_firmware:1.14.1:*:*:*:*:*:*:* Versions 1.14.1 Vulnerable ·ASUS
- cpe:2.3:h:asus:rs500a-e9-rs4:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:o:asus:rs500a-e9_rs4_u_firmware:1.14.1:*:*:*:*:*:*:* Versions 1.14.1 Vulnerable ·ASUS
- cpe:2.3:h:asus:rs500a-e9_rs4_u:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:o:asus:e700_g4_firmware:1.14.1:*:*:*:*:*:*:* Versions 1.14.1 Vulnerable ·ASUS
- cpe:2.3:h:asus:e700_g4:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:o:asus:ws_c422_pro\/se_firmware:1.14.1:*:*:*:*:*:*:* Versions 1.14.1 Vulnerable ·ASUS
- cpe:2.3:h:asus:ws_c422_pro\/se:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:o:asus:ws_x299_pro\/se_firmware:1.14.1:*:*:*:*:*:*:* Versions 1.14.1 Vulnerable ·ASUS
- cpe:2.3:h:asus:ws_x299_pro\/se:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:o:asus:z11pa-u12_firmware:1.15.1:*:*:*:*:*:*:* Versions 1.15.1 Vulnerable ·ASUS
- cpe:2.3:h:asus:z11pa-u12:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:o:asus:z11pa-u12\/10g-2s_firmware:1.15.1:*:*:*:*:*:*:* Versions 1.15.1 Vulnerable ·ASUS
- cpe:2.3:h:asus:z11pa-u12\/10g-2s:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:o:asus:knpa-u16_firmware:1.13.4:*:*:*:*:*:*:* Versions 1.13.4 Vulnerable ·ASUS
- cpe:2.3:h:asus:knpa-u16:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:o:asus:esc4000_dhd_g4_firmware:1.13.7:*:*:*:*:*:*:* Versions 1.13.7 Vulnerable ·ASUS
- cpe:2.3:h:asus:esc4000_dhd_g4:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:o:asus:esc4000_g4_firmware:1.15.2:*:*:*:*:*:*:* Versions 1.15.2 Vulnerable ·ASUS
- cpe:2.3:h:asus:esc4000_g4:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:o:asus:rs720q-e9-rs24-s_firmware:1.15.0:*:*:*:*:*:*:* Versions 1.15.0 Vulnerable ·ASUS
- cpe:2.3:h:asus:rs720q-e9-rs24-s:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:o:asus:rs720q-e9-rs8_firmware:1.15.0:*:*:*:*:*:*:* Versions 1.15.0 Vulnerable ·ASUS
- cpe:2.3:h:asus:rs720q-e9-rs8:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:o:asus:rs720q-e9-rs8-s_firmware:1.15.0:*:*:*:*:*:*:* Versions 1.15.0 Vulnerable ·ASUS
- cpe:2.3:h:asus:rs720q-e9-rs8-s:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:o:asus:z11pa-d8_firmware:1.14.1:*:*:*:*:*:*:* Versions 1.14.1 Vulnerable ·ASUS
- cpe:2.3:h:asus:z11pa-d8:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:o:asus:z11pa-d8c_firmware:1.14.1:*:*:*:*:*:*:* Versions 1.14.1 Vulnerable ·ASUS
- cpe:2.3:h:asus:z11pa-d8c:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:o:asus:rs720-e9-rs24-u_firmware:1.14.3:*:*:*:*:*:*:* Versions 1.14.3 Vulnerable ·ASUS
- cpe:2.3:h:asus:rs720-e9-rs24-u:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:o:asus:rs720-e9-rs8-g_firmware:1.15.2:*:*:*:*:*:*:* Versions 1.15.2 Vulnerable ·ASUS
- cpe:2.3:h:asus:rs720-e9-rs8-g:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:o:asus:rs500-e9-ps4_firmware:1.15.4:*:*:*:*:*:*:* Versions 1.15.4 Vulnerable ·ASUS
- cpe:2.3:h:asus:rs500-e9-ps4:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:o:asus:pro_e800_g4_firmware:1.14.2:*:*:*:*:*:*:* Versions 1.14.2 Vulnerable ·ASUS
- cpe:2.3:h:asus:pro_e800_g4:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:o:asus:rs500-e9-rs4_firmware:1.15.4:*:*:*:*:*:*:* Versions 1.15.4 Vulnerable ·ASUS
- cpe:2.3:h:asus:rs500-e9-rs4:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:o:asus:rs500-e9-rs4-u_firmware:1.15.4:*:*:*:*:*:*:* Versions 1.15.4 Vulnerable ·ASUS
- cpe:2.3:h:asus:rs500-e9-rs4-u:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:o:asus:rs520-e9-rs12-e_firmware:1.15.3:*:*:*:*:*:*:* Versions 1.15.3 Vulnerable ·ASUS
- cpe:2.3:h:asus:rs520-e9-rs12-e:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:o:asus:rs520-e9-rs8_firmware:1.15.3:*:*:*:*:*:*:* Versions 1.15.3 Vulnerable ·ASUS
- cpe:2.3:h:asus:rs520-e9-rs8:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:o:asus:esc8000_g4_firmware:1.15.4:*:*:*:*:*:*:* Versions 1.15.4 Vulnerable ·ASUS
- cpe:2.3:h:asus:esc8000_g4:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:o:asus:esc8000_g4\/10g_firmware:1.15.4:*:*:*:*:*:*:* Versions 1.15.4 Vulnerable ·ASUS
- cpe:2.3:h:asus:esc8000_g4\/10g:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:o:asus:rs720-e9-rs12-e_firmware:1.15.2:*:*:*:*:*:*:* Versions 1.15.2 Vulnerable ·ASUS
- cpe:2.3:h:asus:rs720-e9-rs12-e:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:o:asus:ws_c621e_sage_firmware:1.15.1:*:*:*:*:*:*:* Versions 1.15.1 Vulnerable ·ASUS
- cpe:2.3:h:asus:ws_c621e_sage:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:o:asus:rs500a-e10-ps4_firmware:1.15.2:*:*:*:*:*:*:* Versions 1.15.2 Vulnerable ·ASUS
- cpe:2.3:h:asus:rs500a-e10-ps4:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:o:asus:rs500a-e10-rs4_firmware:1.15.2:*:*:*:*:*:*:* Versions 1.15.2 Vulnerable ·ASUS
- cpe:2.3:h:asus:rs500a-e10-rs4:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:o:asus:rs700a-e9-rs12v2_firmware:1.15.1:*:*:*:*:*:*:* Versions 1.15.1 Vulnerable ·ASUS
- cpe:2.3:h:asus:rs700a-e9-rs12v2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:o:asus:rs700a-e9-rs4v2_firmware:1.15.1:*:*:*:*:*:*:* Versions 1.15.1 Vulnerable ·ASUS
- cpe:2.3:h:asus:rs700a-e9-rs4v2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:o:asus:rs720a-e9-rs12v2_firmware:1.15.2:*:*:*:*:*:*:* Versions 1.15.2 Vulnerable ·ASUS
- cpe:2.3:h:asus:rs720a-e9-rs12v2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:o:asus:rs720a-e9-rs24v2_firmware:1.15.1:*:*:*:*:*:*:* Versions 1.15.1 Vulnerable ·ASUS
- cpe:2.3:h:asus:rs720a-e9-rs24v2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:o:asus:z11pr-d16_firmware:1.15.3:*:*:*:*:*:*:* Versions 1.15.3 Vulnerable ·ASUS
- cpe:2.3:h:asus:z11pr-d16:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2021-28207
- 2026-10-03 Alias added: GHSA-98hm-w38p-p29q
References
More ASUS Asmb9-ikvm Firmware vulnerabilities
- TI-2021-09438 ASUS BMC's firmware: path traversal - Delete video file function CVSS 3.1MEDIUM 4.9
- TI-2021-09437 ASUS BMC's firmware: path traversal - Get video file function CVSS 3.1MEDIUM 4.9
- TI-2021-09435 ASUS BMC's firmware: path traversal - Record video file function CVSS 3.1MEDIUM 4.9
- TI-2021-09431 ASUS BMC's firmware: buffer overflow - Service configuration-2 function CVSS 3.1MEDIUM 4.9
- TI-2021-09430 ASUS BMC's firmware: buffer overflow - Service configuration-1 function CVSS 3.1MEDIUM 4.9
- TI-2021-09429 ASUS BMC's firmware: buffer overflow - CD media configuration function CVSS 3.1MEDIUM 4.9
Sources
- CVE-2021-28207 · CVE Program
- CVE-2021-28207 · NVD
- FIRST EPSS
- GHSA-98hm-w38p-p29q · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences