Lucene search

K
prionPRIOn knowledge basePRION:CVE-2021-21884
HistoryDec 22, 2021 - 7:15 p.m.

Command injection

2021-12-2219:15:00
PRIOn knowledge base
www.prio-n.com
3

9.3 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

59.7%

An OS command injection vulnerability exists in the Web Manager SslGenerateCSR functionality of Lantronix PremierWave 2050 8.9.0.0R4. A specially-crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.

CPENameOperatorVersion
premierwave_2050_firmwareeq8.9.0.0 r4

9.3 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

59.7%