Lucene search
K

8 matches found

OSV
OSV
added 2021/12/22 7:15 p.m.1 views

CVE-2021-21882

An OS command injection vulnerability exists in the Web Manager FsUnmount functionality of Lantronix PremierWave 2050 8.9.0.0R4. A specially-crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger this vulnerability...

8.8CVSS7.4AI score0.0605EPSS
Exploits1References1
NVD
NVD
added 2021/12/22 7:15 p.m.14 views

CVE-2021-21882

An OS command injection vulnerability exists in the Web Manager FsUnmount functionality of Lantronix PremierWave 2050 8.9.0.0R4. A specially-crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger this vulnerability...

9.9CVSS0.0605EPSS
Exploits1References1
OSV
OSV
added 2021/12/22 7:15 p.m.0 views

CVE-2021-21892

A stack-based buffer overflow vulnerability exists in the Web Manager FsUnmount functionality of Lantronix PremierWave 2050 8.9.0.0R4 in QEMU. A specially crafted HTTP request can lead to remote code execution. An attacker can make an authenticated HTTP request to trigger this vulnerability...

9.9CVSS7.9AI score0.07147EPSS
Exploits1References1
Prion
Prion
added 2021/12/22 7:15 p.m.15 views

Command injection

An OS command injection vulnerability exists in the Web Manager FsUnmount functionality of Lantronix PremierWave 2050 8.9.0.0R4. A specially-crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger this vulnerability...

9CVSS8.9AI score0.0605EPSS
Exploits1References1Affected Software1
Cvelist
Cvelist
added 2021/12/22 6:6 p.m.14 views

CVE-2021-21882

An OS command injection vulnerability exists in the Web Manager FsUnmount functionality of Lantronix PremierWave 2050 8.9.0.0R4. A specially-crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger this vulnerability...

9.9CVSS9.1AI score0.0605EPSS
Exploits1References1
CVE
CVE
added 2021/12/22 6:6 p.m.64 views

CVE-2021-21882

CVE-2021-21882 is an OS command injection in Lantronix PremierWave 2050 Web Manager FsUnmount. The Talos report details an authenticated attacker who can submit a crafted HTTP request to trigger arbitrary OS commands via unsanitized input used in two system calls (to /sbin/ltrx_usb_umount and mou...

9.9CVSS8.8AI score0.0605EPSS
Exploits1References1Affected Software1
Talos
Talos
added 2021/11/15 12:0 a.m.29 views

Lantronix PremierWave 2050 Web Manager FsUnmount stack-based buffer overflow vulnerability

Summary A stack-based buffer overflow vulnerability exists in the Web Manager FsUnmount functionality of Lantronix PremierWave 2050 8.9.0.0R4 in QEMU. A specially crafted HTTP request can lead to remote code execution. An attacker can make an authenticated HTTP request to trigger this...

9.9CVSS9.8AI score0.07147EPSS
Exploits1
Talos
Talos
added 2021/11/15 12:0 a.m.31 views

Lantronix PremierWave 2050 Web Manager FsUnmount OS command injection vulnerability

Summary An OS command injection vulnerability exists in the Web Manager FsUnmount functionality of Lantronix PremierWave 2050 8.9.0.0R4. A specially-crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger this vulnerability. Test...

9.9CVSS9.1AI score0.0605EPSS
Exploits1
Rows per page
Query Builder