CVE-2021-26728

🗓️ 24 Oct 2022 00:00:00Reported by NozomiType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 59 Views

Command injection and buffer overflow in spx_restservice

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2021-26728	24 Oct 202218:26	–	circl
CNNVD	Lanner IAC-AST2500A 缓冲区错误漏洞	24 Oct 202200:00	–	cnnvd
Cvelist	CVE-2021-26728 spx_restservice KillDupUsr_func Command Injection and Stack-Based Buffer Overflow	24 Oct 202200:00	–	cvelist
EUVD	EUVD-2021-13515	7 Oct 202500:30	–	euvd
NVD	CVE-2021-26728	24 Oct 202214:15	–	nvd
OSV	CVE-2021-26728	24 Oct 202214:15	–	osv
Prion	Stack overflow	24 Oct 202214:15	–	prion
Positive Technologies	PT-2022-9790 · Lanner · Iac-Ast2500A	24 Oct 202200:00	–	ptsecurity
RedhatCVE	CVE-2021-26728	6 Feb 202503:40	–	redhatcve
The Hacker News	Over a Dozen New BMC Firmware Flaws Expose OT and IoT Devices to Remote Attacks	28 Nov 202210:07	–	thn

NVD

Node

lannerinc iac-ast2500a_firmwareMatch1.10.0

AND

lannerinc iac-ast2500aMatch-

[
  {
    "vendor": "Lanner Inc",
    "product": "IAC-AST2500A",
    "versions": [
      {
        "version": "1.10.0",
        "status": "affected"
      }
    ]
  }
]

Source	Link
nozominetworks	www.nozominetworks.com/blog/vulnerabilities-in-bmc-firmware-affect-ot-iot-device-security-part-1/
nozominetworks	www.nozominetworks.com/labs/vulnerability-advisories/cve-2021-26728/