Skip to content
OpenAdvisories
Medium · 6.5 CVE-2021-26732 EUVD-2021-13519GHSA-8pc4-5whg-xj4v

spx_restservice First_network_func Broken Access Control

Published Oct 24, 2022 · Updated May 7, 2025 · Assigned by Nozomi

Description

A broken access control vulnerability in the First_network_func function of spx_restservice allows an attacker to arbitrarily change the network configuration of the BMC. This issue affects: Lanner Inc IAC-AST2500A standard firmware version 1.10.0.

Affected products

VendorProductAffectedFixed
Lanner IAC-AST2500A 1.10.0 —

References