Lucene search
+L

207 matches found

CNVD
CNVD
added 2021/11/21 12:0 a.m.57 views

Lantronix PremierWave 2050 Path Traversal Vulnerability (CNVD-2022-04979)

The Lantronix PremierWave 2050 is an embedded enterprise Wi-Fi module from Lantronix, Inc. Used to provide reliable and always-on 5G Wi-Fi connectivity, the Lantronix PremierWave 2050 is vulnerable to a path traversal vulnerability that can be exploited by attackers to cause local file inclusion...

7.2CVSS3AI score0.02386EPSS
SaveExploits1References1
CNVD
CNVD
added 2021/11/21 12:0 a.m.58 views

Lantronix PremierWave 2050 Stack Buffer Overflow Vulnerability (CNVD-2022-01604)

The Lantronix PremierWave 2050 is an embedded enterprise Wi-Fi module from Lantronix, Inc. The Lantronix PremierWave 2050 in version 8.9.0.0R4 is vulnerable to a stack buffer overflow vulnerability that could be exploited by attackers to cause remote code execution...

9.9CVSS6.9AI score0.02845EPSS
SaveExploits1References1
CNVD
CNVD
added 2021/11/21 12:0 a.m.20 views

Lantronix PremierWave 2050 file contains vulnerabilities

The Lantronix PremierWave 2050 is an embedded enterprise Wi-Fi module from Lantronix, Inc. A file inclusion vulnerability exists in the Lantronix PremierWave 2050, which stems from the product's Web Manager Applications and FsBrowse features that do not validate input data. An attacker could use...

6.8CVSS3.3AI score0.01203EPSS
SaveExploits1References1
CNVD
CNVD
added 2021/11/21 12:0 a.m.66 views

Lantronix PremierWave 2050 OS Command Injection Vulnerability

The Lantronix PremierWave 2050 is an embedded enterprise Wi-Fi module from Lantronix, Inc. The Lantronix PremierWave 2050 in version 8.9.0.0R4 is vulnerable to OS command injection, which stems from a Web Manager Diagnostics:Ping feature that fails to properly filter special characters, commands,...

9.9CVSS3.5AI score0.06061EPSS
SaveExploits1References1
CNVD
CNVD
added 2021/11/21 12:0 a.m.59 views

Lantronix PremierWave 2050 OS Command Injection Vulnerability

The Lantronix PremierWave 2050 is an embedded enterprise Wi-Fi module from Lantronix, Inc. The Lantronix PremierWave 2050 is vulnerable to an operating system command injection vulnerability that could be exploited by attackers to cause arbitrary command execution...

9.9CVSS7.2AI score0.06061EPSS
SaveExploits1References1
CNVD
CNVD
added 2021/11/21 12:0 a.m.49 views

Lantronix PremierWave 2050 OS Command Injection Vulnerability (CNVD-2022-04980)

The Lantronix PremierWave 2050 is an embedded enterprise Wi-Fi module from Lantronix, Inc. The Lantronix PremierWave 2050 is vulnerable to an operating system command injection vulnerability that could be exploited by attackers to cause arbitrary command execution...

9.9CVSS7.2AI score0.06061EPSS
SaveExploits1References1
CNVD
CNVD
added 2021/11/21 12:0 a.m.62 views

Lantronix PremierWave 2050 OS Command Injection Vulnerability (CNVD-2022-01599)

The Lantronix PremierWave 2050 is an embedded enterprise Wi-Fi module from Lantronix, Inc. The Lantronix PremierWave 2050 in version 8.9.0.0R4 contains a security vulnerability that originates when the Web Manager wireless network scanner feature fails to properly filter special characters,...

9.9CVSS2.9AI score0.36234EPSS
SaveExploits1References1
Talos Blog
Talos Blog
added 2021/11/16 8:20 a.m.16 views

Vulnerability Spotlight: Vulnerabilities in Lantronix PremierWave 2050 could lead to code execution, file deletion

Matt Wiseman discovered these vulnerabilities. Blog by Jon Munshaw. Cisco Talos recently discovered multiple vulnerabilities in Lantronix’s PremierWave 2050, an embedded Wi-Fi module. There are several vulnerabilities in PremierWave 2050’s Web Manager, a web-accessible application that... This is...

7.2AI score
SaveExploits0
CNNVD
CNNVD
added 2021/11/15 12:0 a.m.11 views

Lantronix PremierWave 2050 操作系统命令注入漏洞

The Lantronix PremierWave 2050 is an embedded enterprise Wi-Fi module from Lantronix, Inc. The Lantronix PremierWave 2050 in version 8.9.0.0R4 is vulnerable to OS command injection, which stems from a Web Manager Diagnostics:Ping feature that fails to properly filter special characters, commands,...

9.9CVSS6AI score0.06061EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2021/11/15 12:0 a.m.9 views

Lantronix PremierWave 2050 缓冲区错误漏洞

The Lantronix PremierWave 2050 is an embedded enterprise Wi-Fi module from Lantronix, Inc. The Lantronix PremierWave 2050 version 8.9.0.0R4 is vulnerable to a buffer overflow vulnerability that could be exploited by an attacker to send specially designed HTTP requests for arbitrary command...

9.9CVSS6.3AI score0.30436EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2021/11/15 12:0 a.m.6 views

PT-2021-7560 · Lantronix · Lantronix Premierwave 2050

Name of the Vulnerable Software and Affected Versions: Lantronix PremierWave 2050 affected versions not specified Description: A specially-crafted HTTP request can lead to arbitrary command execution in the keypasswd parameter. An attacker can make an authenticated HTTP request to trigger this...

9.1CVSS9.4AI score0.02915EPSS
SaveExploits1References4
Talos
Talos
added 2021/11/15 12:0 a.m.31 views

Lantronix PremierWave 2050 Web Manager Diagnostics: Traceroute OS command injection vulnerability

Summary An OS command injection vulnerability exists in the Web Manager Diagnostics: Traceroute functionality of Lantronix PremierWave 2050 8.9.0.0R4. A specially-crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger this...

9.9CVSS9.9AI score0.06061EPSS
SaveExploits1
CNNVD
CNNVD
added 2021/11/15 12:0 a.m.9 views

Lantronix PremierWave 2050 输入验证错误漏洞

The Lantronix PremierWave 2050 is an embedded enterprise Wi-Fi module from Lantronix, Inc. A file inclusion vulnerability exists in the Lantronix PremierWave 2050, which stems from the product's Web Manager Applications and FsBrowse features that do not validate input data. An attacker could use...

6.8CVSS5.6AI score0.01203EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2021/11/15 12:0 a.m.10 views

Lantronix PremierWave 2050 缓冲区错误漏洞

The Lantronix PremierWave 2050 is an embedded enterprise Wi-Fi module from Lantronix, Inc. The Lantronix PremierWave 2050 has a security vulnerability that could be exploited by an attacker to cause remote code execution...

9.1CVSS6.2AI score0.02989EPSS
SaveExploits1References3
Talos
Talos
added 2021/11/15 12:0 a.m.47 views

Lantronix PremierWave 2050 Web Manager FsCopyFile directory traversal vulnerability

Summary A directory traversal vulnerability exists in the Web Manager FsCopyFile functionality of Lantronix PremierWave 2050 8.9.0.0R4. A specially-crafted HTTP request can lead to local file inclusion. An attacker can make an authenticated HTTP request to trigger this vulnerability. Tested...

7.2CVSS6.8AI score0.02386EPSS
SaveExploits1
Talos
Talos
added 2021/11/15 12:0 a.m.40 views

Lantronix PremierWave 2050 Web Manager SslGenerateCSR OS command injection vulnerability

Summary An OS command injection vulnerability exists in the Web Manager SslGenerateCSR functionality of Lantronix PremierWave 2050 8.9.0.0R4. A specially-crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger this vulnerability...

9.1CVSS9.3AI score0.05271EPSS
SaveExploits1
Talos
Talos
added 2021/11/15 12:0 a.m.39 views

Lantronix PremierWave 2050 Web Manager File Upload directory traversal vulnerability

Summary A directory traversal vulnerability exists in the Web Manager File Upload functionality of Lantronix PremierWave 2050 8.9.0.0R4. A specially-crafted HTTP request can lead to arbitrary file overwrite. An attacker can make an authenticated HTTP request to trigger this vulnerability. Tested...

9.9CVSS8.6AI score0.03656EPSS
SaveExploits1
Talos
Talos
added 2021/11/15 12:0 a.m.51 views

Lantronix PremierWave 2050 Web Manager FsTFtp OS command injection vulnerabilities

Summary Multiple OS command injection vulnerabilities exists in the Web Manager FsTFtp functionality of Lantronix PremierWave 2050 8.9.0.0R4. Specially-crafted HTTP requests can lead to arbitrary command execution. An attacker can make authenticated HTTP requests to trigger these vulnerabilities...

9.1CVSS9.7AI score0.02694EPSS
SaveExploits1
CNNVD
CNNVD
added 2021/11/15 12:0 a.m.13 views

Lantronix PremierWave 2050 路径遍历漏洞

The Lantronix PremierWave 2050 is an embedded enterprise Wi-Fi module from Lantronix, Inc. The Lantronix PremierWave 2050 in version 8.9.0.0R4 contains a security vulnerability that stems from the Web Manager FsBrowseClean feature failing to properly filter special elements in resource or file...

6.5CVSS5.8AI score0.02157EPSS
SaveExploits1References3
Talos
Talos
added 2021/11/15 12:0 a.m.40 views

Lantronix PremierWave 2050 Web Manager FsMove directory traversal vulnerability

Summary A directory traversal vulnerability exists in the Web Manager FsMove functionality of Lantronix PremierWave 2050 8.9.0.0R4. A specially crafted HTTP request can lead to local file inclusion. An attacker can make an authenticated HTTP request to trigger this vulnerability. Tested Versions...

7.2CVSS6.8AI score0.02386EPSS
SaveExploits1
Rows per page
Query Builder