CVE-2021-21878CWE-668

A local file inclusion vulnerability exists in the Web Manager Applications and FsBrowse functionality of Lantronix PremierWave 2050 8.9.0.0R4

Medium · published December 22, 2021

CVSS v3.0
4.9
EPSS
1%
Percentile
69.0
In the wild
Unconfirmed
What it is

A local file inclusion vulnerability exists in the Web Manager Applications and FsBrowse functionality of Lantronix PremierWave 2050 8.9.0.0R4. A specially-crafted series of HTTP requests can lead to local file inclusion. An attacker can make a series of authenticated HTTP requests to trigger this vulnerability.

The record
Technical detail
CVSS v3.0
4.9 · MEDIUM
Vector
CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.01243 · 69.0th percentile
Weakness
CWE-668 · Exposure of Resource to Wrong Sphere
Published
2021-12-22T18:06Z
EPSS history
Timeline
  • 22 DEC 18:06Z
    A local file inclusion vulnerability exists in the Web Manager Applications and FsBrowse functionality of Lantronix PremierWave 2050 8.9.0.0R4
    cvelistv5