Skip to content
OpenAdvisories
Medium · 4.9 CVE-2021-21878 EUVD-2021-9049GHSA-6fw5-96cf-75p5

A local file inclusion vulnerability exists in the Web Manager Applications and FsBrowse functionality of Lantronix PremierWave 2050 8.9.0.…

Published Dec 22, 2021 · Updated Aug 3, 2024 · Assigned by talos

Description

A local file inclusion vulnerability exists in the Web Manager Applications and FsBrowse functionality of Lantronix PremierWave 2050 8.9.0.0R4. A specially-crafted series of HTTP requests can lead to local file inclusion. An attacker can make a series of authenticated HTTP requests to trigger this vulnerability.

Affected products

VendorProductAffectedFixed
— Lantronix Lantronix PremierWave 2050 8.9.0.0R4 (in QEMU) —

References