iac-ast2500a_firmware Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/iac-ast2500a_firmware/ Thu, 23 Feb 2023 14:13:05 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png iac-ast2500a_firmware Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/iac-ast2500a_firmware/ 32 32 CVE-2021-46279 https://cvevulnerability.com/cve_vulnerabilities/cve-2021-46279/ Thu, 23 Feb 2023 14:13:05 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2021-46279/ Session fixation and insufficient session expiration vulnerabilities allow an attacker to perfom session hijacking attacks against users. This issue affects: Lanner Inc IAC-AST2500A standard firmware version 1.10.0.

The post CVE-2021-46279 appeared first on CVE Vulnerability.

]]> Session fixation and insufficient session expiration vulnerabilities allow an attacker to perfom session hijacking attacks against users. This issue affects: Lanner Inc IAC-AST2500A standard firmware version 1.10.0.

The post CVE-2021-46279 appeared first on CVE Vulnerability.

]]> CVE-2021-44769 https://cvevulnerability.com/cve_vulnerabilities/cve-2021-44769/ Thu, 23 Feb 2023 14:12:46 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2021-44769/ An improper input validation vulnerability in the TLS certificate generation function allows an attacker to cause a Denial-of-Service (DoS) condition which can only be reverted via a factory reset. This issue affects: Lanner Inc IAC-AST2500A standard firmware version 1.10.0.

The post CVE-2021-44769 appeared first on CVE Vulnerability.

]]> An improper input validation vulnerability in the TLS certificate generation function allows an attacker to cause a Denial-of-Service (DoS) condition which can only be reverted via a factory reset. This issue affects: Lanner Inc IAC-AST2500A standard firmware version 1.10.0.

The post CVE-2021-44769 appeared first on CVE Vulnerability.

]]> CVE-2021-44776 https://cvevulnerability.com/cve_vulnerabilities/cve-2021-44776/ Thu, 23 Feb 2023 14:12:46 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2021-44776/ A broken access control vulnerability in the SubNet_handler_func function of spx_restservice allows an attacker to arbitrarily change the security access rights to KVM and Virtual Media functionalities. This issue affects: Lanner Inc IAC-AST2500A standard firmware version 1.10.0.

The post CVE-2021-44776 appeared first on CVE Vulnerability.

]]> A broken access control vulnerability in the SubNet_handler_func function of spx_restservice allows an attacker to arbitrarily change the security access rights to KVM and Virtual Media functionalities. This issue affects: Lanner Inc IAC-AST2500A standard firmware version 1.10.0.

The post CVE-2021-44776 appeared first on CVE Vulnerability.

]]> CVE-2021-44467 https://cvevulnerability.com/cve_vulnerabilities/cve-2021-44467/ Thu, 23 Feb 2023 14:12:42 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2021-44467/ A broken access control vulnerability in the KillDupUsr_func function of spx_restservice allows an attacker to arbitrarily terminate active sessions of other users, causing a Denial-of-Service (DoS) condition. This issue affects: Lanner Inc IAC-AST2500A standard firmware version 1.10.0.

The post CVE-2021-44467 appeared first on CVE Vulnerability.

]]> A broken access control vulnerability in the KillDupUsr_func function of spx_restservice allows an attacker to arbitrarily terminate active sessions of other users, causing a Denial-of-Service (DoS) condition. This issue affects: Lanner Inc IAC-AST2500A standard firmware version 1.10.0.

The post CVE-2021-44467 appeared first on CVE Vulnerability.

]]> CVE-2021-26727 https://cvevulnerability.com/cve_vulnerabilities/cve-2021-26727/ Thu, 23 Feb 2023 14:08:24 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2021-26727/ Multiple command injections and stack-based buffer overflows vulnerabilities in the SubNet_handler_func function of spx_restservice allow an attacker to execute arbitrary code with the same privileges as the server user (root). This issue affects: Lanner Inc IAC-AST2500A standard firmware version 1.10.0.

The post CVE-2021-26727 appeared first on CVE Vulnerability.

]]> Multiple command injections and stack-based buffer overflows vulnerabilities in the SubNet_handler_func function of spx_restservice allow an attacker to execute arbitrary code with the same privileges as the server user (root). This issue affects: Lanner Inc IAC-AST2500A standard firmware version 1.10.0.

The post CVE-2021-26727 appeared first on CVE Vulnerability.

]]> CVE-2021-26728 https://cvevulnerability.com/cve_vulnerabilities/cve-2021-26728/ Thu, 23 Feb 2023 14:08:24 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2021-26728/ Command injection and stack-based buffer overflow vulnerabilities in the KillDupUsr_func function of spx_restservice allow an attacker to execute arbitrary code with the same privileges as the server user (root). This issue affects: Lanner Inc IAC-AST2500A standard firmware version 1.10.0.

The post CVE-2021-26728 appeared first on CVE Vulnerability.

]]> Command injection and stack-based buffer overflow vulnerabilities in the KillDupUsr_func function of spx_restservice allow an attacker to execute arbitrary code with the same privileges as the server user (root). This issue affects: Lanner Inc IAC-AST2500A standard firmware version 1.10.0.

The post CVE-2021-26728 appeared first on CVE Vulnerability.

]]> CVE-2021-26729 https://cvevulnerability.com/cve_vulnerabilities/cve-2021-26729/ Thu, 23 Feb 2023 14:08:24 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2021-26729/ Command injection and multiple stack-based buffer overflows vulnerabilities in the Login_handler_func function of spx_restservice allow an attacker to execute arbitrary code with the same privileges as the server user (root). This issue affects: Lanner Inc IAC-AST2500A standard firmware version 1.10.0.

The post CVE-2021-26729 appeared first on CVE Vulnerability.

]]> Command injection and multiple stack-based buffer overflows vulnerabilities in the Login_handler_func function of spx_restservice allow an attacker to execute arbitrary code with the same privileges as the server user (root). This issue affects: Lanner Inc IAC-AST2500A standard firmware version 1.10.0.

The post CVE-2021-26729 appeared first on CVE Vulnerability.

]]> CVE-2021-26730 https://cvevulnerability.com/cve_vulnerabilities/cve-2021-26730/ Thu, 23 Feb 2023 14:08:24 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2021-26730/ A stack-based buffer overflow vulnerability in a subfunction of the Login_handler_func function of spx_restservice allows an attacker to execute arbitrary code with the same privileges as the server user (root). This issue affects: Lanner Inc IAC-AST2500A standard firmware version 1.10.0.

The post CVE-2021-26730 appeared first on CVE Vulnerability.

]]> A stack-based buffer overflow vulnerability in a subfunction of the Login_handler_func function of spx_restservice allows an attacker to execute arbitrary code with the same privileges as the server user (root). This issue affects: Lanner Inc IAC-AST2500A standard firmware version 1.10.0.

The post CVE-2021-26730 appeared first on CVE Vulnerability.

]]> CVE-2021-26731 https://cvevulnerability.com/cve_vulnerabilities/cve-2021-26731/ Thu, 23 Feb 2023 14:08:24 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2021-26731/ Command injection and multiple stack-based buffer overflows vulnerabilities in the modifyUserb_func function of spx_restservice allow an attacker to execute arbitrary code with the same privileges as the server user (root). This issue affects: Lanner Inc IAC-AST2500A standard firmware version 1.10.0.

The post CVE-2021-26731 appeared first on CVE Vulnerability.

]]> Command injection and multiple stack-based buffer overflows vulnerabilities in the modifyUserb_func function of spx_restservice allow an attacker to execute arbitrary code with the same privileges as the server user (root). This issue affects: Lanner Inc IAC-AST2500A standard firmware version 1.10.0.

The post CVE-2021-26731 appeared first on CVE Vulnerability.

]]> CVE-2021-26733 https://cvevulnerability.com/cve_vulnerabilities/cve-2021-26733/ Thu, 23 Feb 2023 14:08:24 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2021-26733/ A broken access control vulnerability in the FirstReset_handler_func function of spx_restservice allows an attacker to arbitrarily send reboot commands to the BMC, causing a Denial-of-Service (DoS) condition. This issue affects: Lanner Inc IAC-AST2500A standard firmware version 1.10.0.

The post CVE-2021-26733 appeared first on CVE Vulnerability.

]]> A broken access control vulnerability in the FirstReset_handler_func function of spx_restservice allows an attacker to arbitrarily send reboot commands to the BMC, causing a Denial-of-Service (DoS) condition. This issue affects: Lanner Inc IAC-AST2500A standard firmware version 1.10.0.

The post CVE-2021-26733 appeared first on CVE Vulnerability.

]]>