Lucene search
TalosCVELIST:CVE-2021-21880HistoryDec 22, 2021 - 6:06 p.m.
CVE-2021-21880
2021-12-2218:06:31
CWE-22
talos
www.cve.org
5
directory traversal
web manager
local file inclusion
http request
authenticated vulnerability
CVSS3
7.2
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
41.7%
A directory traversal vulnerability exists in the Web Manager FsCopyFile functionality of Lantronix PremierWave 2050 8.9.0.0R4. A specially-crafted HTTP request can lead to local file inclusion. An attacker can make an authenticated HTTP request to trigger this vulnerability.
CNA Affected
[
{
"product": "Lantronix",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "Lantronix PremierWave 2050 8.9.0.0R4 (in QEMU)"
}
]
}
]Related
talos
talos
prion
prion
Directory traversal
2021-12-22 19:15:00
cve
cve
CVE-2021-21880
2021-12-22 19:15:09
cnvd
cnvd
Lantronix PremierWave 2050 Path Traversal Vulnerability (CNVD-2022-04979)
2021-11-21 00:00:00
nvd
nvd
CVE-2021-21880
2021-12-22 19:15:09
CVSS3
7.2
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
41.7%
Related for CVELIST:CVE-2021-21880