Lucene search
+L

5 matches found

OSV
OSV
•added 2021/12/22 7:15 p.m.•16 views

CVE-2021-21882

An OS command injection vulnerability exists in the Web Manager FsUnmount functionality of Lantronix PremierWave 2050 8.9.0.0R4. A specially-crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger this vulnerability...

8.8CVSS7.4AI score0.06061EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2021/12/22 7:15 p.m.•9 views

CVE-2021-21882

An OS command injection vulnerability exists in the Web Manager FsUnmount functionality of Lantronix PremierWave 2050 8.9.0.0R4. A specially-crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger this vulnerability...

9.9CVSS7.3AI score0.06061EPSS
SaveExploits1References2
Prion
Prion
•added 2021/12/22 7:15 p.m.•27 views

Command injection

An OS command injection vulnerability exists in the Web Manager FsUnmount functionality of Lantronix PremierWave 2050 8.9.0.0R4. A specially-crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger this vulnerability...

9CVSS8.9AI score0.06061EPSS
SaveExploits1References1Affected Software1
CVE
CVE
•added 2021/12/22 6:06 p.m.•84 views

CVE-2021-21882

CVE-2021-21882 is an OS command injection in Lantronix PremierWave 2050 Web Manager FsUnmount. The Talos report details an authenticated attacker who can submit a crafted HTTP request to trigger arbitrary OS commands via unsanitized input used in two system calls (to /sbin/ltrx_usb_umount and mou...

9.9CVSS8.8AI score0.06061EPSS
SaveExploits1References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/12/22 12:00 a.m.•6 views

CVE-2021-21882: Improper Neutralization of Special Elements used in an OS Command

An OS command injection vulnerability exists in the Web Manager FsUnmount functionality of Lantronix PremierWave 2050 8.9.0.0R4. A specially-crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger this vulnerability...

9.9CVSS6AI score0.06061EPSS
SaveExploits1References3
Rows per page
Query Builder