Lanner IAC-AST2500A 安全漏洞

The Lanner IAC-AST2500A is a module and accelerator card from Lanner. It is suitable for Lanner network devices to support remote management and monitoring of system operation based on the IPMI standard. A security vulnerability exists in the Lanner IAC-AST2500A standard firmware version 1.00.0,...

CVE-2021-26733

CVE-2021-26733 affects Lanner Inc IAC-AST2500A standard firmware version 1.10.0, via a broken access control in spx_restservice’s FirstReset_handler_func that allows an attacker to arbitrarily send reboot commands to the BMC, causing a DoS. No exploit details are provided in the core documents. A...