Browse CVEs

HIGH 7.4 CVE-2021-4228EPSS 10% Use of hard-coded TLS certificate by default allows an attacker to perform Man-in-the-Middle (MitM) attacks even in the presence of the HTTPS connect… Iac Ast2500 Firmware Mitigation only Fix from $1,9502022-10-24 HIGH 8.8 CVE-2021-46279 Session fixation and insufficient session expiration vulnerabilities allow an attacker to perfom session hijacking attacks against users. This issue … Iac Ast2500a Firmware Mitigation only Fix from $1,9502022-10-24 HIGH 7.5 CVE-2021-44467 A broken access control vulnerability in the KillDupUsr_func function of spx_restservice allows an attacker to arbitrarily terminate active sessions … Iac Ast2500a Firmware Mitigation only Fix from $1,9502022-10-24 MEDIUM 6.5 CVE-2021-44769 An improper input validation vulnerability in the TLS certificate generation function allows an attacker to cause a Denial-of-Service (DoS) condition… Iac Ast2500a Firmware Mitigation only Fix from $1,6002022-10-24 MEDIUM 5.3 CVE-2021-44776 A broken access control vulnerability in the SubNet_handler_func function of spx_restservice allows an attacker to arbitrarily change the security ac… Iac Ast2500a Firmware Mitigation only Fix from $1,6002022-10-24 MEDIUM 5.3 CVE-2021-45925 Observable discrepancies in the login process allow an attacker to guess legitimate user names registered in the BMC. This issue affects: Lanner Inc … Iac Ast2500a Firmware Mitigation only Fix from $1,6002022-10-24 CRITICAL 9.8 CVE-2021-26727 Multiple command injections and stack-based buffer overflows vulnerabilities in the SubNet_handler_func function of spx_restservice allow an attacker… Iac Ast2500a Firmware Mitigation only Fix from $2,3002022-10-24 CRITICAL 9.8 CVE-2021-26728 Command injection and stack-based buffer overflow vulnerabilities in the KillDupUsr_func function of spx_restservice allow an attacker to execute arb… Iac Ast2500a Firmware Mitigation only Fix from $2,3002022-10-24 CRITICAL 9.8 CVE-2021-26729 Command injection and multiple stack-based buffer overflows vulnerabilities in the Login_handler_func function of spx_restservice allow an attacker t… Iac Ast2500a Firmware Mitigation only Fix from $2,3002022-10-24 CRITICAL 9.8 CVE-2021-26730 A stack-based buffer overflow vulnerability in a subfunction of the Login_handler_func function of spx_restservice allows an attacker to execute arbi… Iac Ast2500a Firmware Mitigation only Fix from $2,3002022-10-24 CRITICAL 9.8 CVE-2021-26731 Command injection and multiple stack-based buffer overflows vulnerabilities in the modifyUserb_func function of spx_restservice allow an authenticate… Iac Ast2500a Firmware Mitigation only Fix from $2,3002022-10-24 HIGH 7.5 CVE-2021-26733 A broken access control vulnerability in the FirstReset_handler_func function of spx_restservice allows an attacker to arbitrarily send reboot comman… Iac Ast2500a Firmware Mitigation only Fix from $1,9502022-10-24 MEDIUM 5.3 CVE-2021-26732 A broken access control vulnerability in the First_network_func function of spx_restservice allows an attacker to arbitrarily change the network conf… Iac Ast2500a Firmware Mitigation only Fix from $1,6002022-10-24