← Back to browse · API

CVE-2021-26730

Severity
CRITICAL
CVSS
10.0
EPSS
0.0101
Risk score
40.35
CISA KEV
No
PoC
No
Published
2022-10-24
Modified
2025-05-07
First seen
2026-08-07
Aliases
EUVD-2021-13517, GHSA-WJ6F-Q7QM-JQ4X
Products
Lanner Inc:IAC-AST2500A 1.10.0
Sources
euvd EUVD-2021-13517

Description

A stack-based buffer overflow vulnerability in a subfunction of the Login_handler_func function of spx_restservice allows an attacker to execute arbitrary code with the same privileges as the server user (root). This issue affects: Lanner Inc IAC-AST2500A standard firmware version 1.10.0.

References