CVE-2021-21873

A specially-crafted HTTP request can lead to arbitrary command execution in RSA keypasswd parameter. An attacker can make an authenticated HTTP request to trigger this vulnerability.

Score

CVSS 3.1 9.1 Critical

Status

Modified - talos-cna@cisco.com

Published

2021-12-22

Last modified

2024-08-03

Weaknesses

CWE-78

Affected products

• Premierwave 2050 Firmware (Lantronix)

References

• https://talosintelligence.com/vulnerability_reports/TALOS-2021-1314