Lucene search
TalosCVELIST:CVE-2021-21885HistoryDec 22, 2021 - 6:06 p.m.
CVE-2021-21885
2021-12-2218:06:35
CWE-22
talos
www.cve.org
5
vulnerability
directory traversal
lantronix premierwave
CVSS3
7.2
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
41.7%
A directory traversal vulnerability exists in the Web Manager FsMove functionality of Lantronix PremierWave 2050 8.9.0.0R4. A specially crafted HTTP request can lead to local file inclusion. An attacker can make an authenticated HTTP request to trigger this vulnerability.
CNA Affected
[
{
"product": "Lantronix",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "Lantronix PremierWave 2050 8.9.0.0R4 (in QEMU)"
}
]
}
]Related
talos
talos
cnvd
cnvd
Lantronix PremierWave 2050 Path Traversal Vulnerability (CNVD-2022-04978)
2021-11-21 00:00:00
prion
prion
Directory traversal
2021-12-22 19:15:00
nvd
nvd
CVE-2021-21885
2021-12-22 19:15:09
cve
cve
CVE-2021-21885
2021-12-22 19:15:09
CVSS3
7.2
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
41.7%
Related for CVELIST:CVE-2021-21885