CVE-2021-21891

PoC —

CVSS 3.1

9.1 critical

EPSS

3%p87

Published

Dec 22, 2021 (Dec 22, 2021)

Modified

Jun 17, 2026

Description

A stack-based buffer overflow vulnerability exists in the Web Manager FsBrowseClean functionality of Lantronix PremierWave 2050 8.9.0.0R4 (in QEMU). A specially crafted HTTP request can lead to remote code execution in the vulnerable portion of the branch (deletefile). An attacker can make an authenticated HTTP request to trigger this vulnerability.

Vendors: lantronix
Products: premierwave 2050 firmware
Weakness: CWE-121, CWE-787
Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (3.0%)

In the news0 stories

No ingested article mentions this CVE yet.