CVE-2021-26733 spx_restservice FirstReset_handler_func Broken Access Control

A broken access control vulnerability in the FirstResethandlerfunc function of spxrestservice allows an attacker to arbitrarily send reboot commands to the BMC, causing a Denial-of-Service DoS condition. This issue affects: Lanner Inc IAC-AST2500A standard firmware version 1.10.0...

CVE-2021-45925

CVE-2021-45925 affects Lanner Inc IAC-AST2500A standard firmware v1.10.0. Multiple connected sources confirm a vulnerability in the login process that allows observable discrepancies enabling an attacker to enumerate/guess legitimate BMC usernames. The root cause is described as a login process d...

PT-2022-12629 · Lanner · Iac-Ast2500A

Name of the Vulnerable Software and Affected Versions: Lanner Inc IAC-AST2500A version 1.10.0 Description: Session fixation and insufficient session expiration vulnerabilities allow an attacker to perform session hijacking attacks against users. Recommendations: For Lanner Inc IAC-AST2500A versio...

CVE-2021-26731

CVE-2021-26731 affects Lanner Inc IAC-AST2500A standard firmware 1.10.0. Vulnerabilities in spx_restservice.modifyUserb_func enable command injection and multiple stack-based/heap buffer overflows, allowing an authenticated attacker to execute arbitrary code with the server user’s (root) privileg...