CVE-2021-21877

Specially-crafted HTTP requests can lead to arbitrary command execution in “GET” requests. An attacker can make authenticated HTTP requests to trigger this vulnerability.

CVSS v3 9.1 CRITICAL
CVSS v2.0 6.5 MEDIUM

9.1^/10

CVSS v3 : CRITICAL

Vector :

Exploitability : 2.3 / Impact : 6.0

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required HIGH

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope CHANGED

6.5^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:L/Au:S/C:P/I:P/A:P

Exploitability : 8.0 / Impact : 6.4

Access Vector NETWORK

Access Complexity LOW

Authentication SINGLE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
https://talosintelligence.com/vulnerability_reports/TALOS-2021-1315	Exploit Third Party Advisory

Configurations

Configuration 1 (hide)

AND

cpe:2.3:o:lantronix:premierwave_2050_firmware:8.9.0.0:r4:*:*:*:*:*:*

cpe:2.3:h:lantronix:premierwave_2050:-:*:*:*:*:*:*:*

History

03 Jan 2022, 18:54

Type	Values Removed	Values Added
First Time		Lantronix Lantronix premierwave 2050 Firmware Lantronix premierwave 2050
CVSS	v2 : ~~unknown~~ v3 : ~~unknown~~	v2 : 6.5 v3 : 9.1
CPE		cpe:2.3:h:lantronix:premierwave_2050:-:::::::* cpe:2.3:o:lantronix:premierwave_2050_firmware:8.9.0.0:r4::::::
CWE		CWE-78
References	~~(MISC) https://talosintelligence.com/vulnerability_reports/TALOS-2021-1315 -~~	(MISC) https://talosintelligence.com/vulnerability_reports/TALOS-2021-1315 - Exploit, Third Party Advisory

22 Dec 2021, 20:11

Type	Values Removed	Values Added
New CVE

Information

Published : 2021-12-22 19:15

Updated : 2023-12-10 14:09

NVD link : CVE-2021-21877

Mitre link : CVE-2021-21877

CVE.ORG link : CVE-2021-21877

JSON object : View

Products Affected

lantronix

premierwave_2050
premierwave_2050_firmware

CWE

CWE-78

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

{"id": "CVE-2021-21877", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 6.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P", "authentication": "SINGLE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV30": [{"type": "Secondary", "source": "talos-cna@cisco.com", "cvssData": {"scope": "CHANGED", "version": "3.0", "baseScore": 9.1, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "HIGH", "confidentialityImpact": "HIGH"}, "impactScore": 6.0, "exploitabilityScore": 2.3}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 9.1, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "HIGH", "confidentialityImpact": "HIGH"}, "impactScore": 6.0, "exploitabilityScore": 2.3}]}, "published": "2021-12-22T19:15:08.880", "references": [{"url": "https://talosintelligence.com/vulnerability_reports/TALOS-2021-1315", "tags": ["Exploit", "Third Party Advisory"], "source": "talos-cna@cisco.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-78"}]}, {"type": "Secondary", "source": "talos-cna@cisco.com", "description": [{"lang": "en", "value": "CWE-78"}]}], "descriptions": [{"lang": "en", "value": "Specially-crafted HTTP requests can lead to arbitrary command execution in \u201cGET\u201d requests. An attacker can make authenticated HTTP requests to trigger this vulnerability."}, {"lang": "es", "value": "Las peticiones HTTP especialmente dise\u00f1adas pueden conllevar a una ejecuci\u00f3n de comandos arbitrarios en peticiones \"GET\". Un atacante puede realizar peticiones HTTP autenticadas para desencadenar esta vulnerabilidad"}], "lastModified": "2022-10-05T14:46:44.033", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:lantronix:premierwave_2050_firmware:8.9.0.0:r4:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C0160E0B-2A30-4E5C-BC9D-FB059D24BB93"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:lantronix:premierwave_2050:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "18D68E19-E0E6-4102-A973-814686E4EC82"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "talos-cna@cisco.com"}