CVE-2021-21873: OS Command Injection
Published Dec 22, 2021
·Updated
A specially-crafted HTTP request can lead to arbitrary command execution in RSA keypasswd parameter. An attacker can make an authenticated HTTP request to trigger this vulnerability.
Affected Software
2 affected components
Lantronix Premierwave 2050 Firmware=8.9.0.0-r4
Lantronix PremierWave 2050
Event History
Dec 22, 2021
CVE Published
via MITRE·06:06 PM
Data Sourced
via MITRE·06:06 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2021-21873?
CVE-2021-21873 is rated as a critical vulnerability due to its potential for arbitrary command execution.
2
How do I fix CVE-2021-21873?
To fix CVE-2021-21873, you should apply the latest firmware update provided by Lantronix for the PremierWave 2050.
3
What are the consequences of exploiting CVE-2021-21873?
Exploitation of CVE-2021-21873 can lead to unauthorized command execution on affected devices, compromising their integrity.
4
Is CVE-2021-21873 remotely exploitable?
Yes, CVE-2021-21873 can be exploited remotely through specially-crafted HTTP requests.
5
Which devices are impacted by CVE-2021-21873?
CVE-2021-21873 affects the Lantronix PremierWave 2050 firmware version 8.9.0.0-r4.