S4E just found a high-severity finding from top 10 tcp port service scan
PlatformPlansPartners
Resources
ToolsBlogDocs
Sign Up →
critical·Product Based Web Vulnerabilities·Updated Jan 3, 2024

CVE-2021-21881 Scanner

CVE-2021-21881 scanner - OS Command Injection vulnerability in Lantronix PremierWave

Est. Time~10 seconds
Scan TypeSingle Scan
Targetsdomain, ipv4, subdomain
CostFree
3.1k
Times Used
continuous scan runs
4.7k
Continuously Checked
assets under CS
0
Vulnerabilities Found
confirmed findings
References
CVECVE-2021-21881
9.9
CVSScritical
Exploitable remotely over the internet · low-privilege account sufficient.

An OS command injection vulnerability exists in the Web Manager Wireless Network Scanner functionality of Lantronix PremierWave 2050 8.9.0.0R4. A specially-crafted HTTP request can lead to command execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.

Attack Vector
Network
Privileges Req.
Low
User Interaction
None
Affected
Lantronixby n/a
Lantronix PremierWave 2050 8.9.0.0R4 (in QEMU)
Updated Aug 21, 2026View on NVD →
Detail

Lantronix PremierWave 2050 is a wireless device server that allows users to remotely access and manage network devices. The device is commonly used in industrial automation, building automation, and medical devices. Its core functionality includes remote control and device management, remote data logging, and web accessibility. Its features make it possible to remotely manage and monitor devices in a secure and efficient manner.

The CVE-2021-21881 vulnerability was detected in the Web Manager Wireless Network Scanner functionality of Lantronix PremierWave 2050 8.9.0.0R4. This vulnerability allows attackers to inject Operating System (OS) commands into the device using a specially crafted HTTP request. If an attacker can make an authenticated HTTP request, they can exploit this vulnerability to execute commands on the device, which could lead to full system compromise.

When exploited, this vulnerability can lead to a range of adverse outcomes. It allows an attacker to access sensitive information, remotely control the device, and compromise the security of other connected devices. The attacker can also use the device for malicious activities like launching denial of service (DoS) attacks or stealing confidential data. This vulnerability poses a significant risk to the security and integrity of critical systems and sensitive information.

In conclusion, the CVE-2021-21881 vulnerability detected in the Lantronix PremierWave 2050 8.9.0.0R4 device poses a significant threat to network security. Organizations should take necessary measures to mitigate the risk associated with this vulnerability. Those who want to learn more about vulnerabilities in their digital assets can use the pro features of the s4e.io platform for easy and quick access to relevant information. The pro features provide detailed vulnerability reports, threat intelligence, and continuous monitoring of digital assets. By utilizing these features, organizations can safeguard against potential cyber threats and maintain a secure and resilient network infrastructure.

 

REFERENCES

Solution Advice

To protect against this vulnerability, the following precautions can be taken:

  • Regularly update the device's firmware to the latest version.
  • Disable unnecessary functionality and services on the device.
  • Restrict network access to the device to only authorized personnel.
  • Use strong and unique passwords for device authentication.
  • Monitor device logs and network traffic for any suspicious activity.

Get AI-powered remediation steps tailored to your asset.

Try AI Solutions →

Check your infrastructure.
Right now.

11,000+ scanners. Free to start. No credit card required.