Vulnerability Spotlight: Vulnerabilities in Lantronix PremierWave 2050 could lead to code execution

guest · Nov 15, 2021

Vulnerability Spotlight: Vulnerabilities in Lantronix PremierWave 2050 could lead to code execution, file deletion
November 15, 2021
https://blog.talosintelligence.com/2021/11/lantronix-premier-wave-vuln-spotlight.html

Cisco Talos recently discovered multiple vulnerabilities in Lantronix’s PremierWave 2050, an embedded Wi-Fi module.

There are several vulnerabilities in PremierWave 2050’s Web Manager, a web-accessible application that allows users to configure settings for the 2050 gateway. An attacker could exploit some of these vulnerabilities to carry out a range of malicious actions, including executing arbitrary code and deleting or replacing files on the targeted device.
Click to expand...

Twelve of these vulnerabilities could allow a malicious user to manipulate the Web Manager in a way — for example, overflowing a fixed-size buffer — that would allow them to execute arbitrary code. These vulnerabilities all require the attacker to authenticate to the Web Manager first: [...]

There are also four directory traversal vulnerabilities that could lead to local file inclusion or overwrite: [...]
Click to expand...

Users are encouraged to update these affected products as soon as possible: Lantronix PremierWave 2050, version 8.9.0.0R4. Talos tested and confirmed these versions of PremierWave 2050 could be exploited by this vulnerability.
Click to expand...

Log in or Sign up

Vulnerability Spotlight: Vulnerabilities in Lantronix PremierWave 2050 could lead to code execution

guest Guest

Log in or Sign up

Vulnerability Spotlight: Vulnerabilities in Lantronix PremierWave 2050 could lead to code execution

guest Guest

Useful Searches