CVE-2021-21892: Buffer Overflow
A stack-based buffer overflow vulnerability exists in the Web Manager FsUnmount functionality of Lantronix PremierWave 2050 8.9.0.0R4 (in QEMU). A specially crafted HTTP request can lead to remote code execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2021-21892?
CVE-2021-21892 is classified as a critical severity vulnerability due to its potential for remote code execution.
How do I fix CVE-2021-21892?
To fix CVE-2021-21892, you should update the firmware of the Lantronix PremierWave 2050 to the latest version provided by the vendor.
What are the potential impacts of exploiting CVE-2021-21892?
Exploiting CVE-2021-21892 could allow an attacker to execute arbitrary code on the affected device, leading to unauthorized access and control.
Who is affected by CVE-2021-21892?
Users of Lantronix PremierWave 2050 running firmware version 8.9.0.0-R4 are affected by CVE-2021-21892.
Is authentication required to exploit CVE-2021-21892?
Yes, an attacker needs to make an authenticated HTTP request to exploit CVE-2021-21892.