mirror of
https://github.com/0xMarcio/cve.git
synced 2026-05-26 09:28:10 +02:00
953 B
953 B
CVE-2021-21895
Description
A directory traversal vulnerability exists in the Web Manager FsTFtp functionality of Lantronix PremierWave 2050 8.9.0.0R4 (in QEMU). A specially crafted HTTP request can lead to FsTFtp file overwrite. An attacker can make an authenticated HTTP request to trigger this vulnerability.
POC
Reference
- https://talosintelligence.com/vulnerability_reports/TALOS-2021-1337
- https://talosintelligence.com/vulnerability_reports/TALOS-2021-1337
Github
No PoCs found on GitHub currently.