Critical · 9.1 CVE-2021-21876 EUVD-2021-9047GHSA-37qv-xjx4-w4h2

Specially-crafted HTTP requests can lead to arbitrary command execution in PUT requests. An attacker can make authenticated HTTP requests t…

Published Dec 22, 2021 · Updated Aug 3, 2024 · Assigned by talos

Description

Specially-crafted HTTP requests can lead to arbitrary command execution in PUT requests. An attacker can make authenticated HTTP requests to trigger this vulnerability.

Affected products

Vendor	Product	Affected	Fixed
—	Lantronix	Lantronix PremierWave 2050 8.9.0.0R4 (in QEMU)	—

References

https://talosintelligence.com/vulnerability_reports/TALOS-2021-1315