lannerinc records
13 published records for vendor lannerinc.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 5
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-284 Improper Access Control4
- CWE-94 Improper Control of Generation of Code ('Code Injection')4
- CWE-203 Observable Discrepancy1
- CWE-121 Stack-based Buffer Overflow1
- CWE-321 Use of Hard-coded Cryptographic Key1
- CWE-384 Session Fixation1
The weakness classes this vendor ships most often: where to look.
CWEAll records
13 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
40Plan | CVE-2021-26731No exploit | spx_restservice modifyUserb_func Command Injection and Multiple Stack-Based Buffer Overflowslannerinc · iac-ast2500a firmware · CWE-94 | Critical9.8 | — | 2.4% | Oct 24, 2022 |
40Plan | CVE-2021-26727No exploit | spx_restservice SubNet_handler_func Multiple Command Injections and Stack-Based Buffer Overflowslannerinc · iac-ast2500a firmware · CWE-94 | Critical9.8 | — | 2.3% | Oct 24, 2022 |
40Plan | CVE-2021-26728No exploit | spx_restservice KillDupUsr_func Command Injection and Stack-Based Buffer Overflowlannerinc · iac-ast2500a firmware · CWE-94 | Critical9.8 | — | 2.3% | Oct 24, 2022 |
40Plan | CVE-2021-26729No exploit | spx_restservice Login_handler_func Command Injection and Multiple Stack-Based Buffer Overflowslannerinc · iac-ast2500a firmware · CWE-94 | Critical9.8 | — | 2.3% | Oct 24, 2022 |
39Monitor | CVE-2021-26730No exploit | spx_restservice Login_handler_func Subfunction Stack-Based Buffer Overflowlannerinc · iac-ast2500a firmware · CWE-121 | Critical9.8 | — | 1.0% | Oct 24, 2022 |
35Monitor | CVE-2021-46279No exploit | Session Fixation and Insufficient Session Expirationlannerinc · iac-ast2500a firmware · CWE-384 | High8.8 | — | 0.4% | Oct 24, 2022 |
32Monitor | CVE-2021-4228No exploit | Hard-coded TLS Certificatelannerinc · iac-ast2500 firmware · CWE-321 | High7.4 | — | 9.9% | Oct 24, 2022 |
30Monitor | CVE-2021-26733No exploit | spx_restservice FirstReset_handler_func Broken Access Controllannerinc · iac-ast2500a firmware · CWE-284 | High7.5 | — | 0.7% | Oct 24, 2022 |
30Monitor | CVE-2021-44467No exploit | spx_restservice KillDupUsr_func Broken Access Controllannerinc · iac-ast2500a firmware · CWE-284 | High7.5 | — | 0.7% | Oct 24, 2022 |
26Monitor | CVE-2021-44769No exploit | TLS Certificate Generation Function Improper Input Validationlannerinc · iac-ast2500a firmware · CWE-20 | Medium6.5 | — | 0.4% | Oct 24, 2022 |
21Monitor | CVE-2021-45925No exploit | Username Enumerationlannerinc · iac-ast2500a firmware · CWE-203 | Medium5.3 | — | 0.5% | Oct 24, 2022 |
21Monitor | CVE-2021-44776No exploit | spx_restservice SubNet_handler_func Broken Access Controllannerinc · iac-ast2500a firmware · CWE-284 | Medium5.3 | — | 0.5% | Oct 24, 2022 |
21Monitor | CVE-2021-26732No exploit | spx_restservice First_network_func Broken Access Controllannerinc · iac-ast2500a firmware · CWE-284 | Medium5.3 | — | 0.5% | Oct 24, 2022 |
- CVE-2021-2673140Plan
spx_restservice modifyUserb_func Command Injection and Multiple Stack-Based Buffer Overflows
CriticalCVSS 9.8No exploitEPSS 2%lannerinc · iac-ast2500a firmwareOct 24, 2022
- CVE-2021-2672740Plan
spx_restservice SubNet_handler_func Multiple Command Injections and Stack-Based Buffer Overflows
CriticalCVSS 9.8No exploitEPSS 2%lannerinc · iac-ast2500a firmwareOct 24, 2022
- CVE-2021-2672840Plan
spx_restservice KillDupUsr_func Command Injection and Stack-Based Buffer Overflow
CriticalCVSS 9.8No exploitEPSS 2%lannerinc · iac-ast2500a firmwareOct 24, 2022
- CVE-2021-2672940Plan
spx_restservice Login_handler_func Command Injection and Multiple Stack-Based Buffer Overflows
CriticalCVSS 9.8No exploitEPSS 2%lannerinc · iac-ast2500a firmwareOct 24, 2022
- CVE-2021-2673039Monitor
spx_restservice Login_handler_func Subfunction Stack-Based Buffer Overflow
CriticalCVSS 9.8No exploitEPSS 1%lannerinc · iac-ast2500a firmwareOct 24, 2022
- CVE-2021-4627935Monitor
Session Fixation and Insufficient Session Expiration
HighCVSS 8.8No exploitEPSS 0%lannerinc · iac-ast2500a firmwareOct 24, 2022
- CVE-2021-422832Monitor
Hard-coded TLS Certificate
HighCVSS 7.4No exploitEPSS 10%lannerinc · iac-ast2500 firmwareOct 24, 2022
- CVE-2021-2673330Monitor
spx_restservice FirstReset_handler_func Broken Access Control
HighCVSS 7.5No exploitEPSS 1%lannerinc · iac-ast2500a firmwareOct 24, 2022
- CVE-2021-4446730Monitor
spx_restservice KillDupUsr_func Broken Access Control
HighCVSS 7.5No exploitEPSS 1%lannerinc · iac-ast2500a firmwareOct 24, 2022
- CVE-2021-4476926Monitor
TLS Certificate Generation Function Improper Input Validation
MediumCVSS 6.5No exploitEPSS 0%lannerinc · iac-ast2500a firmwareOct 24, 2022
- CVE-2021-4592521Monitor
Username Enumeration
MediumCVSS 5.3No exploitEPSS 1%lannerinc · iac-ast2500a firmwareOct 24, 2022
- CVE-2021-4477621Monitor
spx_restservice SubNet_handler_func Broken Access Control
MediumCVSS 5.3No exploitEPSS 0%lannerinc · iac-ast2500a firmwareOct 24, 2022
- CVE-2021-2673221Monitor
spx_restservice First_network_func Broken Access Control
MediumCVSS 5.3No exploitEPSS 0%lannerinc · iac-ast2500a firmwareOct 24, 2022