Skip to content
Sign in
9.1 Critical

CVE-2021-21884 An OS command injection vulnerability exists in the Web Manager SslGenerateCSR functionality of Lantronix PremierWave…

Description

An OS command injection vulnerability exists in the Web Manager SslGenerateCSR functionality of Lantronix PremierWave 2050 8.9.0.0R4. A specially-crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.

Affected products and versions

Product Affected versions Fixed in
Lantronix Versions not published

Other CVEs of Lantronix

The 26 CVEs of Lantronix →
CVE-2021-21896 A directory traversal vulnerability exists in the Web Manager FsBrowseClean functionality of Lantronix PremierWave… 4.9 Medium CVE-2021-21895 A directory traversal vulnerability exists in the Web Manager FsTFtp functionality of Lantronix PremierWave 2050… 9.1 Critical CVE-2021-21892 A stack-based buffer overflow vulnerability exists in the Web Manager FsUnmount functionality of Lantronix PremierWave… 9.9 Critical CVE-2021-21894 A directory traversal vulnerability exists in the Web Manager FsTFtp functionality of Lantronix PremierWave 2050… 9.1 Critical
Track this CVE