lannerinc records

13 published records for vendor lannerinc.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 5
With a fix record: 0%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

13 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
40Plan	CVE-2021-26731No exploit	spx_restservice modifyUserb_func Command Injection and Multiple Stack-Based Buffer Overflowslannerinc · iac-ast2500a firmware · CWE-94 pre-auth RCE Command injection	Critical9.8	—	2.4%	Oct 24, 2022
40Plan	CVE-2021-26727No exploit	spx_restservice SubNet_handler_func Multiple Command Injections and Stack-Based Buffer Overflowslannerinc · iac-ast2500a firmware · CWE-94 pre-auth RCE Command injection	Critical9.8	—	2.3%	Oct 24, 2022
40Plan	CVE-2021-26728No exploit	spx_restservice KillDupUsr_func Command Injection and Stack-Based Buffer Overflowlannerinc · iac-ast2500a firmware · CWE-94 pre-auth RCE Command injection	Critical9.8	—	2.3%	Oct 24, 2022
40Plan	CVE-2021-26729No exploit	spx_restservice Login_handler_func Command Injection and Multiple Stack-Based Buffer Overflowslannerinc · iac-ast2500a firmware · CWE-94 pre-auth RCE Command injection	Critical9.8	—	2.3%	Oct 24, 2022
39Monitor	CVE-2021-26730No exploit	spx_restservice Login_handler_func Subfunction Stack-Based Buffer Overflowlannerinc · iac-ast2500a firmware · CWE-121 pre-auth RCE Memory safety	Critical9.8	—	1.0%	Oct 24, 2022
35Monitor	CVE-2021-46279No exploit	Session Fixation and Insufficient Session Expirationlannerinc · iac-ast2500a firmware · CWE-384 Pre-auth	High8.8	—	0.4%	Oct 24, 2022
32Monitor	CVE-2021-4228No exploit	Hard-coded TLS Certificatelannerinc · iac-ast2500 firmware · CWE-321 Pre-auth Hard-coded credentials	High7.4	—	9.9%	Oct 24, 2022
30Monitor	CVE-2021-26733No exploit	spx_restservice FirstReset_handler_func Broken Access Controllannerinc · iac-ast2500a firmware · CWE-284 Pre-auth Broken access control (IDOR) Denial of service	High7.5	—	0.7%	Oct 24, 2022
30Monitor	CVE-2021-44467No exploit	spx_restservice KillDupUsr_func Broken Access Controllannerinc · iac-ast2500a firmware · CWE-284 Pre-auth Broken access control (IDOR) Denial of service	High7.5	—	0.7%	Oct 24, 2022
26Monitor	CVE-2021-44769No exploit	TLS Certificate Generation Function Improper Input Validationlannerinc · iac-ast2500a firmware · CWE-20 Denial of service	Medium6.5	—	0.4%	Oct 24, 2022
21Monitor	CVE-2021-45925No exploit	Username Enumerationlannerinc · iac-ast2500a firmware · CWE-203 Pre-auth	Medium5.3	—	0.5%	Oct 24, 2022
21Monitor	CVE-2021-44776No exploit	spx_restservice SubNet_handler_func Broken Access Controllannerinc · iac-ast2500a firmware · CWE-284 Pre-auth Broken access control (IDOR)	Medium5.3	—	0.5%	Oct 24, 2022
21Monitor	CVE-2021-26732No exploit	spx_restservice First_network_func Broken Access Controllannerinc · iac-ast2500a firmware · CWE-284 Pre-auth Broken access control (IDOR)	Medium5.3	—	0.5%	Oct 24, 2022

CVE-2021-26731
40Plan
spx_restservice modifyUserb_func Command Injection and Multiple Stack-Based Buffer Overflows
CriticalCVSS 9.8No exploitEPSS 2%
- pre-auth RCE
- Command injection
lannerinc · iac-ast2500a firmwareOct 24, 2022
CVE-2021-26727
40Plan
spx_restservice SubNet_handler_func Multiple Command Injections and Stack-Based Buffer Overflows
CriticalCVSS 9.8No exploitEPSS 2%
- pre-auth RCE
- Command injection
lannerinc · iac-ast2500a firmwareOct 24, 2022
CVE-2021-26728
40Plan
spx_restservice KillDupUsr_func Command Injection and Stack-Based Buffer Overflow
CriticalCVSS 9.8No exploitEPSS 2%
- pre-auth RCE
- Command injection
lannerinc · iac-ast2500a firmwareOct 24, 2022
CVE-2021-26729
40Plan
spx_restservice Login_handler_func Command Injection and Multiple Stack-Based Buffer Overflows
CriticalCVSS 9.8No exploitEPSS 2%
- pre-auth RCE
- Command injection
lannerinc · iac-ast2500a firmwareOct 24, 2022
CVE-2021-26730
39Monitor
spx_restservice Login_handler_func Subfunction Stack-Based Buffer Overflow
CriticalCVSS 9.8No exploitEPSS 1%
- pre-auth RCE
- Memory safety
lannerinc · iac-ast2500a firmwareOct 24, 2022
CVE-2021-46279
35Monitor
Session Fixation and Insufficient Session Expiration
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
lannerinc · iac-ast2500a firmwareOct 24, 2022
CVE-2021-4228
32Monitor
Hard-coded TLS Certificate
HighCVSS 7.4No exploitEPSS 10%
- Pre-auth
- Hard-coded credentials
lannerinc · iac-ast2500 firmwareOct 24, 2022
CVE-2021-26733
30Monitor
spx_restservice FirstReset_handler_func Broken Access Control
HighCVSS 7.5No exploitEPSS 1%
lannerinc · iac-ast2500a firmwareOct 24, 2022
CVE-2021-44467
30Monitor
spx_restservice KillDupUsr_func Broken Access Control
HighCVSS 7.5No exploitEPSS 1%
lannerinc · iac-ast2500a firmwareOct 24, 2022
CVE-2021-44769
26Monitor
TLS Certificate Generation Function Improper Input Validation
MediumCVSS 6.5No exploitEPSS 0%
- Denial of service
lannerinc · iac-ast2500a firmwareOct 24, 2022
CVE-2021-45925
21Monitor
Username Enumeration
MediumCVSS 5.3No exploitEPSS 1%
- Pre-auth
lannerinc · iac-ast2500a firmwareOct 24, 2022
CVE-2021-44776
21Monitor
spx_restservice SubNet_handler_func Broken Access Control
MediumCVSS 5.3No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
lannerinc · iac-ast2500a firmwareOct 24, 2022
CVE-2021-26732
21Monitor
spx_restservice First_network_func Broken Access Control
MediumCVSS 5.3No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
lannerinc · iac-ast2500a firmwareOct 24, 2022