CVE-2021-21891

CRITICAL

Lantronix PremierWave 2050 Firmware 8.9.0.0R4 - Authenticated Stack-based Buffer Overflow in Web Manager FsBrowseClean

Title source: llm
STIX 2.1

Description

A stack-based buffer overflow vulnerability exists in the Web Manager FsBrowseClean functionality of Lantronix PremierWave 2050 8.9.0.0R4 (in QEMU). A specially crafted HTTP request can lead to remote code execution in the vulnerable portion of the branch (deletefile). An attacker can make an authenticated HTTP request to trigger this vulnerability.

References (1)

Core 1
Core References
Exploit, Technical Description, Third Party Advisory x_refsource_misc
https://talosintelligence.com/vulnerability_reports/TALOS-2021-1334

Scores

CVSS v3 9.1
EPSS 0.0299
EPSS Percentile 85.6%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Details

CWE
CWE-121 CWE-787
Status published
Products (1)
lantronix/premierwave_2050_firmware 8.9.0.0 r4
Published Dec 22, 2021
Tracked Since Feb 18, 2026