medium5.3
CVE-2021-45925
Observable discrepancies in the login process allow an attacker to guess legitimate user names registered in the BMC.
Impact
Observable discrepancies in the login process allow an attacker to guess legitimate user names registered in the BMC. This issue affects: Lanner Inc IAC-AST2500A standard firmware version 1.10.0.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Lannerinc | Iac-Ast2500a Firmware | Version 1.10.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://www.nozominetworks.com/blog/vulnerabilities-in-bmc-firmware-affect-ot-iot-device-security-part-1/
- https://www.nozominetworks.com/labs/vulnerability-advisories/cve-2021-45925/
- https://www.nozominetworks.com/blog/vulnerabilities-in-bmc-firmware-affect-ot-iot-device-security-part-1/
- https://www.nozominetworks.com/labs/vulnerability-advisories/cve-2021-45925/