CVE-2021-21882: OS Command Injection
An OS command injection vulnerability exists in the Web Manager FsUnmount functionality of Lantronix PremierWave 2050 8.9.0.0R4. A specially-crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2021-21882?
CVE-2021-21882 is an OS command injection vulnerability in the Web Manager FsUnmount functionality of Lantronix PremierWave 2050 8.9.0.0R4.
How severe is CVE-2021-21882?
CVE-2021-21882 has a severity rating of 8.8, which is considered critical.
How does CVE-2021-21882 exploit the system?
CVE-2021-21882 exploits the system through a specially-crafted HTTP request that can lead to arbitrary command execution.
What software is affected by CVE-2021-21882?
Lantronix Premierwave 2050 Firmware version 8.9.0.0-r4 is affected by CVE-2021-21882.
Is CVE-2021-21882 a high-risk vulnerability?
Yes, CVE-2021-21882 is considered a critical vulnerability with a severity value of 8.8.