NetSight
critical9.1

CVE-2021-21874

A specially-crafted HTTP request can lead to arbitrary command execution in DSA keypasswd parameter.

Impact

A specially-crafted HTTP request can lead to arbitrary command execution in DSA keypasswd parameter. An attacker can make an authenticated HTTP request to trigger this vulnerability.

Affected products

VendorProductAffected versions
LantronixPremierwave 2050 Firmware
Version 8.9.0.0

Weakness classification

References