Show filters
13 Total Results
Displaying 1-10 of 13
Sort by:
Attacker Value
Unknown
CVE-2021-4228
Disclosure Date: October 24, 2022 (last updated October 08, 2023)
Use of hard-coded TLS certificate by default allows an attacker to perform Man-in-the-Middle (MitM) attacks even in the presence of the HTTPS connection. This issue affects: Lanner Inc IAC-AST2500A standard firmware version 1.00.0.
0
Attacker Value
Unknown
CVE-2021-46279
Disclosure Date: October 24, 2022 (last updated October 08, 2023)
Session fixation and insufficient session expiration vulnerabilities allow an attacker to perfom session hijacking attacks against users. This issue affects: Lanner Inc IAC-AST2500A standard firmware version 1.10.0.
0
Attacker Value
Unknown
CVE-2021-45925
Disclosure Date: October 24, 2022 (last updated October 08, 2023)
Observable discrepancies in the login process allow an attacker to guess legitimate user names registered in the BMC. This issue affects: Lanner Inc IAC-AST2500A standard firmware version 1.10.0.
0
Attacker Value
Unknown
CVE-2021-44776
Disclosure Date: October 24, 2022 (last updated October 08, 2023)
A broken access control vulnerability in the SubNet_handler_func function of spx_restservice allows an attacker to arbitrarily change the security access rights to KVM and Virtual Media functionalities. This issue affects: Lanner Inc IAC-AST2500A standard firmware version 1.10.0.
0
Attacker Value
Unknown
CVE-2021-44769
Disclosure Date: October 24, 2022 (last updated October 08, 2023)
An improper input validation vulnerability in the TLS certificate generation function allows an attacker to cause a Denial-of-Service (DoS) condition which can only be reverted via a factory reset. This issue affects: Lanner Inc IAC-AST2500A standard firmware version 1.10.0.
0
Attacker Value
Unknown
CVE-2021-44467
Disclosure Date: October 24, 2022 (last updated September 30, 2024)
A broken access control vulnerability in the KillDupUsr_func function of spx_restservice allows an attacker to arbitrarily terminate active sessions of other users, causing a Denial-of-Service (DoS) condition, if an input parameter is correctly guessed. This issue affects: Lanner Inc IAC-AST2500A standard firmware version 1.10.0.
0
Attacker Value
Unknown
CVE-2021-26733
Disclosure Date: October 24, 2022 (last updated October 08, 2023)
A broken access control vulnerability in the FirstReset_handler_func function of spx_restservice allows an attacker to arbitrarily send reboot commands to the BMC, causing a Denial-of-Service (DoS) condition. This issue affects: Lanner Inc IAC-AST2500A standard firmware version 1.10.0.
0
Attacker Value
Unknown
CVE-2021-26732
Disclosure Date: October 24, 2022 (last updated October 08, 2023)
A broken access control vulnerability in the First_network_func function of spx_restservice allows an attacker to arbitrarily change the network configuration of the BMC. This issue affects: Lanner Inc IAC-AST2500A standard firmware version 1.10.0.
0
Attacker Value
Unknown
CVE-2021-26731
Disclosure Date: October 24, 2022 (last updated September 30, 2024)
Command injection and multiple stack-based buffer overflows vulnerabilities in the modifyUserb_func function of spx_restservice allow an authenticated attacker to execute arbitrary code with the same privileges as the server user (root). This issue affects: Lanner Inc IAC-AST2500A standard firmware version 1.10.0.
0
Attacker Value
Unknown
CVE-2021-26730
Disclosure Date: October 24, 2022 (last updated October 08, 2023)
A stack-based buffer overflow vulnerability in a subfunction of the Login_handler_func function of spx_restservice allows an attacker to execute arbitrary code with the same privileges as the server user (root). This issue affects: Lanner Inc IAC-AST2500A standard firmware version 1.10.0.
0
