Skip to content
NewA calmer, faster ZeroHour
VulnerabilityPoC3

CVE-2021-21877

CVSS 3.1
9.1 critical
EPSS
3%p87
Published
·
Modified
Analyze CVE-2021-21877 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

Specially-crafted HTTP requests can lead to arbitrary command execution in “GET” requests. An attacker can make authenticated HTTP requests to trigger this vulnerability.

Vendors
lantronix
Products
premierwave 2050 firmware
Weakness
CWE-78
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
NVD CVE.org GitHub PoCs EPSS (2.8%)

In the news

1 story