ZeroHour

CVE-2021-21873

PoC
CVSS 3.1
9.1 critical
EPSS
3%p86
Published
()
Modified
Description

A specially-crafted HTTP request can lead to arbitrary command execution in RSA keypasswd parameter. An attacker can make an authenticated HTTP request to trigger this vulnerability.

Vendors
lantronix
Products
premierwave 2050 firmware
Weakness
CWE-78
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

In the news