CVE-2021-21881: OS Command Injection
An OS command injection vulnerability exists in the Web Manager Wireless Network Scanner functionality of Lantronix PremierWave 2050 8.9.0.0R4. A specially-crafted HTTP request can lead to command execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2021-21881?
CVE-2021-21881 is rated as a critical severity vulnerability due to its potential for remote command execution.
How do I fix CVE-2021-21881?
To fix CVE-2021-21881, update the Lantronix PremierWave 2050 to the latest firmware version that addresses this vulnerability.
What does CVE-2021-21881 affect?
CVE-2021-21881 affects the Web Manager Wireless Network Scanner functionality of the Lantronix PremierWave 2050 version 8.9.0.0R4.
Can CVE-2021-21881 be exploited remotely?
Yes, CVE-2021-21881 can be exploited remotely through specially-crafted HTTP requests.
Is CVE-2021-21881 an authenticated vulnerability?
Yes, an authenticated user is required to trigger the CVE-2021-21881 vulnerability.