Lucene search
HistoryOct 24, 2022 - 2:15 p.m.
CVE-2021-46279
session hijacking
lanner inc
iac-ast2500a
firmware
vulnerability
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
0.002 Low
EPSS
Percentile
59.7%
Session fixation and insufficient session expiration vulnerabilities allow an attacker to perfom session hijacking attacks against users. This issue affects: Lanner Inc IAC-AST2500A standard firmware version 1.10.0.
Affected configurations
Node
lannerinciac-ast2500aMatch-
lannerinciac-ast2500a_firmwareMatch1.10.0
Related
cvelist
cvelist
CVE-2021-46279 Session Fixation and Insufficient Session Expiration
2022-10-24 00:00:00
cve
cve
CVE-2021-46279
2022-10-24 14:15:49
prion
prion
Session fixation
2022-10-24 14:15:00
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
0.002 Low
EPSS
Percentile
59.7%
Related for NVD:CVE-2021-46279