CVE-2021-26729

Command injection and multiple stack-based buffer overflows vulnerabilities in the Loginhandlerfunc function of spxrestservice allow an attacker to execute arbitrary code with the same privileges as the server user root. This issue affects: Lanner Inc IAC-AST2500A standard firmware version 1.10.0...

CVE-2021-26729

CVE-2021-26729 affects Lanner Inc IAC-AST2500A standard firmware version 1.10.0. The issue is a vulnerability in the spx_restservice “Login_handler_func” that enables command injection and multiple stack-based buffer overflows , allowing an attacker to execute arbitrary code with the same privile...