Local File Inclusion Vulnerability in Lantronix PremierWave 2050
CVE-2021-21878

4.9MEDIUM

Key Information:

Vendor

Lantronix

Status
Lantronix
Vendor
CVE Published:
22 December 2021

What is CVE-2021-21878?

A local file inclusion vulnerability exists in the Web Manager Applications and FsBrowse functionality of Lantronix PremierWave 2050 8.9.0.0R4. The vulnerability can be exploited by an attacker who sends a crafted series of authenticated HTTP requests, potentially allowing unauthorized access to sensitive files on the server. This poses a significant security risk by enabling attackers to leverage the access to execute malicious scripts or retrieve confidential information.

Affected Version(s)

Lantronix Lantronix PremierWave 2050 8.9.0.0R4 (in QEMU)

References

https://talosintelligence.com/vulnerability_reports/TALOS...
x_refsource_MISC

CVSS V3.1

Score:
4.9
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.