CVE-2021-21895: Path Traversal
A directory traversal vulnerability exists in the Web Manager FsTFtp functionality of Lantronix PremierWave 2050 8.9.0.0R4 (in QEMU). A specially crafted HTTP request can lead to FsTFtp file overwrite. An attacker can make an authenticated HTTP request to trigger this vulnerability.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2021-21895?
CVE-2021-21895 is considered a high severity vulnerability due to its potential for file overwrite via a directory traversal attack.
How do I fix CVE-2021-21895?
To fix CVE-2021-21895, you should apply the latest firmware updates provided by Lantronix for the PremierWave 2050 device.
Who is affected by CVE-2021-21895?
CVE-2021-21895 affects users running Lantronix PremierWave 2050 firmware version 8.9.0.0-R4.
What type of attack can exploit CVE-2021-21895?
CVE-2021-21895 can be exploited through a specially crafted authenticated HTTP request that facilitates a directory traversal attack.
What can an attacker achieve by exploiting CVE-2021-21895?
An attacker exploiting CVE-2021-21895 can overwrite files on the affected device, compromising its integrity.