Return to CVE list

CVE-2021-21872

9.9
Critical

CVE-2021-21872

talos-cna@cisco.com
Modified
View on MITREFind on GitHub

Description

An OS command injection vulnerability exists in the Web Manager Diagnostics: Traceroute functionality of Lantronix PremierWave 2050 8.9.0.0R4. A specially-crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.

Exploits

No known exploits found for this CVE.

Search Exploit-DB

References

talos-cna@cisco.com
https://talosintelligence.com/vulnerability_reports/TALOS-2021-1312
af854a3a-2127-422b-91ae-364da2661108
https://talosintelligence.com/vulnerability_reports/TALOS-2021-1312