4 matches found
CVE-2021-21876
Specially-crafted HTTP requests can lead to arbitrary command execution in PUT requests. An attacker can make authenticated HTTP requests to trigger this vulnerability...
9.1CVSS7.2AI score0.02694EPSS
SaveExploits1References1
CVE-2021-21876
Specially-crafted HTTP requests can lead to arbitrary command execution in PUT requests. An attacker can make authenticated HTTP requests to trigger this vulnerability...
9.1CVSS6AI score0.02694EPSS
SaveExploits1References1
CVE-2021-21876
CVE-2021-21876 affects Lantronix PremierWave 2050 Web Manager. Vulnerable due to OS command injection in the FsTFtp handling of authenticated HTTP requests (PUT/GET). The vulnerability arises when user-supplied parameters (cwd, local, remote, host, port, etc.) are assembled into a system call wit...
9.1CVSS9.2AI score0.02694EPSS
SaveExploits1References1Affected Software1
20