← Back to browse · API

CVE-2021-21879

Severity
CRITICAL
CVSS
9.9
EPSS
0.03656
Risk score
40.88
CISA KEV
No
PoC
No
Published
2021-12-22
Modified
2024-08-03
First seen
2026-08-08
Aliases
EUVD-2021-9050, GHSA-5G9Q-Q7RM-5VQ9
Products
n/a:Lantronix Lantronix PremierWave 2050 8.9.0.0R4 (in QEMU)
Sources
euvd EUVD-2021-9050

Description

A directory traversal vulnerability exists in the Web Manager File Upload functionality of Lantronix PremierWave 2050 8.9.0.0R4. A specially-crafted HTTP request can lead to arbitrary file overwrite. An attacker can make an authenticated HTTP request to trigger this vulnerability.

References