CVE-2021-21876: OS Command Injection
Published Dec 22, 2021
·Updated
Specially-crafted HTTP requests can lead to arbitrary command execution in PUT requests. An attacker can make authenticated HTTP requests to trigger this vulnerability.
Affected Software
2 affected components
Lantronix Premierwave 2050 Firmware=8.9.0.0-r4
Lantronix PremierWave 2050
Event History
Dec 22, 2021
CVE Published
via MITRE·06:06 PM
Data Sourced
via MITRE·06:06 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2021-21876?
CVE-2021-21876 has a high severity rating due to the potential for arbitrary command execution.
2
How do I fix CVE-2021-21876?
To fix CVE-2021-21876, update the affected firmware of the Lantronix PremierWave 2050 to the latest version available from the manufacturer.
3
What types of attacks can exploit CVE-2021-21876?
CVE-2021-21876 can be exploited through specially-crafted HTTP requests leading to unauthorized command execution.
4
Which devices are affected by CVE-2021-21876?
CVE-2021-21876 specifically affects the Lantronix PremierWave 2050 firmware version 8.9.0.0-r4.
5
Are there any mitigations for CVE-2021-21876?
Mitigating CVE-2021-21876 entails implementing strict access controls and ensuring that devices are updated to the latest firmware.