CVE-2021-21881

PoC —

CVSS 3.1

9.9 critical

EPSS

36%p98

Published

Dec 22, 2021 (Dec 22, 2021)

Modified

Jun 17, 2026

Description

An OS command injection vulnerability exists in the Web Manager Wireless Network Scanner functionality of Lantronix PremierWave 2050 8.9.0.0R4. A specially-crafted HTTP request can lead to command execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.

Vendors: lantronix
Products: premierwave 2050 firmware
Weakness: CWE-78
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (36.2%)

In the news2 stories

Network Security Trends: Recent Exploits Observed in the Wild Include Remote Code Execution, Cross

Palo Alto Unit 42Jun 5, 20:05 UTC · Jun 5, 2024Vulnerability in the wildCVE-2022-22954 CVE-2022-22963 CVE-2022-22965+20 CVEs

Vulnerability Spotlight: Vulnerabilities in Lantronix PremierWave 2050 could lead to code execution, file deletion

Cisco TalosNov 15, 19:19 UTC · Nov 15, 2021Vulnerability in the wildCVE-2021-21872 CVE-2021-21873 CVE-2021-21875+18 CVEs