Critical · 9.1 CVE-2021-21877 EUVD-2021-9048GHSA-vp3f-gm6v-2mg2

Specially-crafted HTTP requests can lead to arbitrary command execution in “GET” requests. An attacker can make authenticated HTTP requests…

Published Dec 22, 2021 · Updated Aug 3, 2024 · Assigned by talos

Description

Specially-crafted HTTP requests can lead to arbitrary command execution in “GET” requests. An attacker can make authenticated HTTP requests to trigger this vulnerability.

Affected products

Vendor	Product	Affected	Fixed
—	Lantronix	Lantronix PremierWave 2050 8.9.0.0R4 (in QEMU)	—

References

https://talosintelligence.com/vulnerability_reports/TALOS-2021-1315