CVE-2021-21874

9.1 criticalEPSS 3.0%

Critical (9.1) in lantronix premierwave 2050 firmware. EPSS 3.0% chance of exploitation in the next 30 days.

A specially-crafted HTTP request can lead to arbitrary command execution in DSA keypasswd parameter. An attacker can make an authenticated HTTP request to trigger this vulnerability.

Severity

CVSS 3.1

9.1 critical

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

EPSS: 3.0% chance of exploitation in the next 30 days; higher than 87% of CVEs (scores of 2026-10-31)
CWE: CWE-78
Published: 2021-12-22
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

lantronix:premierwave_2050_firmware

References

https://talosintelligence.com/vulnerability_reports/TALOS-2021-1314
https://talosintelligence.com/vulnerability_reports/TALOS-2021-1314

Check your stack JSON