CVE-2021-21890: Buffer Overflow
A stack-based buffer overflow vulnerability exists in the Web Manager FsBrowseClean functionality of Lantronix PremierWave 2050 8.9.0.0R4 (in QEMU). A specially crafted HTTP request can lead to remote code execution in the vulnerable portion of the branch (deletedir). An attacker can make an authenticated HTTP request to trigger this vulnerability.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2021-21890?
CVE-2021-21890 is classified as a critical severity vulnerability due to its potential for remote code execution.
How does CVE-2021-21890 work?
CVE-2021-21890 exploits a stack-based buffer overflow in the Web Manager FsBrowseClean functionality through a specially crafted HTTP request.
What software is affected by CVE-2021-21890?
CVE-2021-21890 affects the Lantronix PremierWave 2050 firmware version 8.9.0.0R4.
How do I fix CVE-2021-21890?
To mitigate CVE-2021-21890, it is recommended to update the Lantronix PremierWave 2050 firmware to a version that has patched the vulnerability.
What are the potential impacts of CVE-2021-21890?
The potential impacts of CVE-2021-21890 include remote code execution, which could allow an attacker to gain unauthorized access to the device.