CVE:CVE-2021-28204
CNNVD:CNNVD-202104-313
ASUS BMC Firmware是中国华硕（ASUS）公司的一个固件。
ASUS BMC Firmware Web management page 存在操作系统命令注入漏洞，远程攻击者可利用该漏洞在获得管理员权限后，可以启动命令注入，任意执行命令。
solution:Upgrade asus z10pr-d16_firmware to a higher version than 1.14.51,and avoid the version 1.14.51; Upgrade asus asmb8-ikvm_firmware to a higher version than 1.14.51,and avoid the version 1.14.51; Upgrade asus z10pe-d16_ws_firmware to a higher version than 1.14.2,and avoid the version 1.14.2