Lucene search

K
prionPRIOn knowledge basePRION:CVE-2021-26728
HistoryOct 24, 2022 - 2:15 p.m.

Stack overflow

2022-10-2414:15:00
PRIOn knowledge base
www.prio-n.com
8
command injection
buffer overflow
killdupusr_func
spx_restservice
lanner inc
iac-ast2500a
privilege escalation
nvd

9.9 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

59.7%

Command injection and stack-based buffer overflow vulnerabilities in the KillDupUsr_func function of spx_restservice allow an attacker to execute arbitrary code with the same privileges as the server user (root). This issue affects: Lanner Inc IAC-AST2500A standard firmware version 1.10.0.

CPENameOperatorVersion
iac-ast2500a_firmwareeq1.10.0

9.9 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

59.7%

Related for PRION:CVE-2021-26728