CVE-2021-26728 in IAC-AST2500A
摘要 (英语)
Command injection and stack-based buffer overflow vulnerabilities in the KillDupUsr_func function of spx_restservice allow an attacker to execute arbitrary code with the same privileges as the server user (root). This issue affects: Lanner Inc IAC-AST2500A standard firmware version 1.10.0.
If you want to get best quality of vulnerability data, you may have to visit VulDB.
负责
Nozomi Networks Inc.
预定
2021-02-05
披露
2022-10-24
状态
已确认
条目
VulDB provides additional information and datapoints for this CVE:
| 标识符 | 漏洞 | CWE | 可利用 | 对策 | CVE |
|---|---|---|---|---|---|
| 212019 | Lanner IAC-AST2500A spx_restservice KillDupUsr_func 内存损坏 | 787 | 未定义 | 未定义 | CVE-2021-26728 |