CVE-2021-28207: medium-severity vulnerability in ASUS BMC firmware for ASMB9-iKVM
ASUS BMC's firmware: path traversal - Get Help file function
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
No sign of exploitation. No public exploitation artifact known so far.
A flaw in ASUS BMC's web management interface allows administrators to access system files they shouldn't be able to reach by manipulating file paths. This matters because it could expose sensitive system information to unauthorized users with admin access.
The Get Help file function in ASUS BMC firmware fails to properly validate path traversal payloads in user-supplied parameters. An authenticated administrator can exploit this via directory traversal techniques to read arbitrary files from the underlying system, potentially disclosing sensitive configuration or credential data.
In the same product, most dangerous first.