Lucene search
HistoryOct 24, 2022 - 2:15 p.m.
CVE-2021-45925
cve-2021-45925
lanner inc iac-ast2500a
firmware vulnerability
login process
5.3 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
0.001 Low
EPSS
Percentile
26.4%
Observable discrepancies in the login process allow an attacker to guess legitimate user names registered in the BMC. This issue affects: Lanner Inc IAC-AST2500A standard firmware version 1.10.0.
Affected configurations
Node
lannerinciac-ast2500a_firmwareMatch1.10.0
lannerinciac-ast2500aMatch-
Related
prion
prion
Buffer overflow
2022-10-24 14:15:00
cve
cve
CVE-2021-45925
2022-10-24 14:15:49
cvelist
cvelist
CVE-2021-45925 Username Enumeration
2022-10-24 00:00:00
5.3 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
0.001 Low
EPSS
Percentile
26.4%
Related for NVD:CVE-2021-45925