Skip to content
NewA calmer, faster ZeroHour
VulnerabilityPoC2

CVE-2021-21873

CVSS 3.1
9.1 critical
EPSS
3%p88
Published
·
Modified
Analyze CVE-2021-21873 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

A specially-crafted HTTP request can lead to arbitrary command execution in RSA keypasswd parameter. An attacker can make an authenticated HTTP request to trigger this vulnerability.

Vendors
lantronix
Products
premierwave 2050 firmware
Weakness
CWE-78
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
NVD CVE.org GitHub PoCs EPSS (3.0%)

In the news

1 story