CVE-2021-21888: OS Command Injection
An OS command injection vulnerability exists in the Web Manager SslGenerateCertificate functionality of Lantronix PremierWave 2050 8.9.0.0R4 (in QEMU). A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2021-21888?
CVE-2021-21888 is considered a high-severity vulnerability due to its potential for arbitrary command execution.
How do I fix CVE-2021-21888?
To resolve CVE-2021-21888, users should update their Lantronix PremierWave 2050 firmware to the latest version that addresses this vulnerability.
What systems are affected by CVE-2021-21888?
CVE-2021-21888 affects the Lantronix PremierWave 2050 running firmware version 8.9.0.0-R4.
What type of vulnerability is CVE-2021-21888?
CVE-2021-21888 is classified as an OS command injection vulnerability.
Can CVE-2021-21888 be exploited remotely?
Yes, CVE-2021-21888 can be exploited remotely through a specially crafted HTTP request.