CVE-2021-21894: Path Traversal
A directory traversal vulnerability exists in the Web Manager FsTFtp functionality of Lantronix PremierWave 2050 8.9.0.0R4 (in QEMU). A specially crafted HTTP request can lead to arbitrary file overwrite FsTFtp file disclosure. An attacker can make an authenticated HTTP request to trigger this vulnerability.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2021-21894?
CVE-2021-21894 has a medium severity rating due to its potential for arbitrary file overwrite and sensitive file disclosure.
How do I fix CVE-2021-21894?
To remediate CVE-2021-21894, update the firmware of the Lantronix PremierWave 2050 to the latest available version that addresses this vulnerability.
Who is affected by CVE-2021-21894?
CVE-2021-21894 affects users of the Lantronix PremierWave 2050 firmware version 8.9.0.0-R4.
What can an attacker do with CVE-2021-21894?
An attacker can exploit CVE-2021-21894 to send a specially crafted HTTP request, potentially leading to arbitrary file overwrite or unauthorized file disclosures.
Is authentication required to exploit CVE-2021-21894?
Yes, exploitation of CVE-2021-21894 requires that the attacker is authenticated to make the HTTP request.