CVE-2021-21877: OS Command Injection
Published Dec 22, 2021
·Updated
Specially-crafted HTTP requests can lead to arbitrary command execution in “GET” requests. An attacker can make authenticated HTTP requests to trigger this vulnerability.
Affected Software
2 affected components
Lantronix Premierwave 2050 Firmware=8.9.0.0-r4
Lantronix PremierWave 2050
Event History
Dec 22, 2021
CVE Published
via MITRE·06:06 PM
Data Sourced
via MITRE·06:06 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2021-21877?
CVE-2021-21877 is considered a high-severity vulnerability due to its potential for arbitrary command execution.
2
How do I fix CVE-2021-21877?
To mitigate CVE-2021-21877, it is recommended to upgrade the affected firmware to the latest version provided by Lantronix.
3
What types of attacks can exploit CVE-2021-21877?
CVE-2021-21877 can be exploited through specially-crafted HTTP GET requests that enable arbitrary command execution on the device.
4
Which devices are affected by CVE-2021-21877?
CVE-2021-21877 affects the Lantronix PremierWave 2050 firmware version 8.9.0.0-r4.
5
Is authentication required to exploit CVE-2021-21877?
Yes, an attacker needs to make authenticated HTTP requests to trigger the CVE-2021-21877 vulnerability.