Skip to content
OpenAdvisories
Critical · 10.0 CVE-2021-26730 EUVD-2021-13517GHSA-wj6f-q7qm-jq4x

spx_restservice Login_handler_func Subfunction Stack-Based Buffer Overflow

Published Oct 24, 2022 · Updated May 7, 2025 · Assigned by Nozomi

Description

A stack-based buffer overflow vulnerability in a subfunction of the Login_handler_func function of spx_restservice allows an attacker to execute arbitrary code with the same privileges as the server user (root). This issue affects: Lanner Inc IAC-AST2500A standard firmware version 1.10.0.

Affected products

VendorProductAffectedFixed
Lanner IAC-AST2500A 1.10.0 —

References