Lanner Inc

Products

ProductCVEsExploitedLatest
IAC-AST2500A13–Oct 24, 2022

Exploited and recent CVEs

  • CVE-2021-26732 Medium 6.5 spx_restservice First_network_func Broken Access Control 0.5%
  • CVE-2021-26729 Critical 10.0 spx_restservice Login_handler_func Command Injection and Multiple Stack-Based Buffer Overflows 2.7%
  • CVE-2021-26727 Critical 10.0 spx_restservice SubNet_handler_func Multiple Command Injections and Stack-Based Buffer Overflows 2.7%
  • CVE-2021-26731 Critical 9.1 spx_restservice modifyUserb_func Command Injection and Multiple Stack-Based Buffer Overflows 2.7%
  • CVE-2021-26728 Critical 10.0 spx_restservice KillDupUsr_func Command Injection and Stack-Based Buffer Overflow 2.7%
  • CVE-2021-26733 Medium 5.3 spx_restservice FirstReset_handler_func Broken Access Control 0.8%
  • CVE-2021-26730 Critical 10.0 spx_restservice Login_handler_func Subfunction Stack-Based Buffer Overflow 1.3%
  • CVE-2021-45925 Medium 5.3 Username Enumeration 0.6%
  • CVE-2021-4228 Medium 5.8 Hard-coded TLS Certificate 9.9%
  • CVE-2021-46279 Medium 5.8 Session Fixation and Insufficient Session Expiration 0.5%
  • CVE-2021-44769 Medium 4.9 TLS Certificate Generation Function Improper Input Validation 0.5%
  • CVE-2021-44467 Medium 5.3 spx_restservice KillDupUsr_func Broken Access Control 0.8%
  • CVE-2021-44776 Medium 6.5 spx_restservice SubNet_handler_func Broken Access Control 0.5%