Stack-based Buffer Overflow in Lantronix PremierWave 2050 by Lantronix
CVE-2021-21889

9.9CRITICAL

Key Information:

Vendor

Lantronix

Status
Lantronix
Vendor
CVE Published:
22 December 2021

What is CVE-2021-21889?

A stack-based buffer overflow vulnerability has been identified in the Web Manager Ping functionality of the Lantronix PremierWave 2050 version 8.9.0.0R4. This security flaw can be exploited by an attacker through a specially crafted HTTP request, which has the potential to facilitate remote code execution. Authentication is required to trigger this issue, as the manipulation of the involved HTTP requests enables unauthorized actions against the affected system.

Affected Version(s)

Lantronix Lantronix PremierWave 2050 8.9.0.0R4 (in QEMU)

References

https://talosintelligence.com/vulnerability_reports/TALOS...
x_refsource_MISC

CVSS V3.1

Score:
9.9
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.