Lannerinc
Lannerinc Iac-ast2500a Firmware: vulnerabilidades y CVE
Lannerinc Iac-ast2500a Firmware tiene 12 vulnerabilidades publicadas, 0 de ellas en los últimos 12 meses. 5 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE12
Últimos 12 meses0
Críticas5
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2021-46279 | Alta (8.8) | 0.43% | — | 24 oct 2022 | Session fixation and insufficient session expiration vulnerabilities allow an attacker to perfom session hijacking attacks against users. This issue affects: Lanner Inc IAC-AST2500A standard firmware version 1.10.0. |
| CVE-2021-45925 | Media (5.3) | 0.55% | — | 24 oct 2022 | Observable discrepancies in the login process allow an attacker to guess legitimate user names registered in the BMC. This issue affects: Lanner Inc IAC-AST2500A standard firmware version 1.10.0. |
| CVE-2021-44776 | Media (5.3) | 0.48% | — | 24 oct 2022 | A broken access control vulnerability in the SubNet_handler_func function of spx_restservice allows an attacker to arbitrarily change the security access rights to KVM and Virtual Media functionalities. This issue… |
| CVE-2021-44769 | Media (6.5) | 0.45% | — | 24 oct 2022 | An improper input validation vulnerability in the TLS certificate generation function allows an attacker to cause a Denial-of-Service (DoS) condition which can only be reverted via a factory reset. This issue affects:… |
| CVE-2021-44467 | Alta (7.5) | 0.70% | — | 24 oct 2022 | A broken access control vulnerability in the KillDupUsr_func function of spx_restservice allows an attacker to arbitrarily terminate active sessions of other users, causing a Denial-of-Service (DoS) condition, if an… |
| CVE-2021-26733 | Alta (7.5) | 0.70% | — | 24 oct 2022 | A broken access control vulnerability in the FirstReset_handler_func function of spx_restservice allows an attacker to arbitrarily send reboot commands to the BMC, causing a Denial-of-Service (DoS) condition. This issue… |
| CVE-2021-26732 | Media (5.3) | 0.48% | — | 24 oct 2022 | A broken access control vulnerability in the First_network_func function of spx_restservice allows an attacker to arbitrarily change the network configuration of the BMC. This issue affects: Lanner Inc IAC-AST2500A… |
| CVE-2021-26731 | Crítica (9.8) | 2.4% | — | 24 oct 2022 | Command injection and multiple stack-based buffer overflows vulnerabilities in the modifyUserb_func function of spx_restservice allow an authenticated attacker to execute arbitrary code with the same privileges as the… |
| CVE-2021-26730 | Crítica (9.8) | 1.1% | — | 24 oct 2022 | A stack-based buffer overflow vulnerability in a subfunction of the Login_handler_func function of spx_restservice allows an attacker to execute arbitrary code with the same privileges as the server user (root). This… |
| CVE-2021-26729 | Crítica (9.8) | 2.4% | — | 24 oct 2022 | Command injection and multiple stack-based buffer overflows vulnerabilities in the Login_handler_func function of spx_restservice allow an attacker to execute arbitrary code with the same privileges as the server user… |
| CVE-2021-26728 | Crítica (9.8) | 2.4% | — | 24 oct 2022 | Command injection and stack-based buffer overflow vulnerabilities in the KillDupUsr_func function of spx_restservice allow an attacker to execute arbitrary code with the same privileges as the server user (root). This… |
| CVE-2021-26727 | Crítica (9.8) | 2.4% | — | 24 oct 2022 | Multiple command injections and stack-based buffer overflows vulnerabilities in the SubNet_handler_func function of spx_restservice allow an attacker to execute arbitrary code with the same privileges as the server user… |