CVSS: 10.0EPSS: 0%CPEs: 2EXPL: 0CVE-2021-26727 – spx_restservice SubNet_handler_func Multiple Command Injections and Stack-Based Buffer Overflows
https://notcve.org/view.php?id=CVE-2021-26727
Multiple command injections and stack-based buffer overflows vulnerabilities in the SubNet_handler_func function of spx_restservice allow an attacker to execute arbitrary code with the same privileges as the server user (root). This issue affects: Lanner Inc IAC-AST2500A standard firmware version 1.10.0. Múltiples inyecciones de comandos y los desbordamientos de búfer en la región stack de la memoria en la función SubNet_handler_func de spx_restservice permiten a un atacante ejecutar código arbitrario con los mismos privilegios que el usuario del servidor (root). Este problema afecta: Lanner Inc IAC-AST2500A versión de firmware estándar 1.10.0 • https://www.nozominetworks.com/blog/vulnerabilities-in-bmc-firmware-affect-ot-iot-device-security-part-1 https://www.nozominetworks.com/labs/vulnerability-advisories/cve-2021-26727 • CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection') CWE-94: Improper Control of Generation of Code ('Code Injection') CWE-121: Stack-based Buffer Overflow CWE-787: Out-of-bounds Write •
CVSS: 10.0EPSS: 0%CPEs: 2EXPL: 0CVE-2021-26729 – spx_restservice Login_handler_func Command Injection and Multiple Stack-Based Buffer Overflows
https://notcve.org/view.php?id=CVE-2021-26729
Command injection and multiple stack-based buffer overflows vulnerabilities in the Login_handler_func function of spx_restservice allow an attacker to execute arbitrary code with the same privileges as the server user (root). This issue affects: Lanner Inc IAC-AST2500A standard firmware version 1.10.0. Unas vulnerabilidades de inyección de comandos y múltiples desbordamientos de búfer en la región stack de la memoria en la función Login_handler_func de spx_restservice permiten a un atacante ejecutar código arbitrario con los mismos privilegios que el usuario del servidor (root). Este problema afecta: Lanner Inc IAC-AST2500A versión de firmware estándar 1.10.0 • https://www.nozominetworks.com/blog/vulnerabilities-in-bmc-firmware-affect-ot-iot-device-security-part-1 https://www.nozominetworks.com/labs/vulnerability-advisories/cve-2021-26729 • CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection') CWE-94: Improper Control of Generation of Code ('Code Injection') CWE-121: Stack-based Buffer Overflow CWE-787: Out-of-bounds Write •
CVSS: 7.5EPSS: 0%CPEs: 2EXPL: 0CVE-2021-26733 – spx_restservice FirstReset_handler_func Broken Access Control
https://notcve.org/view.php?id=CVE-2021-26733
A broken access control vulnerability in the FirstReset_handler_func function of spx_restservice allows an attacker to arbitrarily send reboot commands to the BMC, causing a Denial-of-Service (DoS) condition. This issue affects: Lanner Inc IAC-AST2500A standard firmware version 1.10.0. Una vulnerabilidad de control de acceso rota en la función FirstReset_handler_func de spx_restservice permite a un atacante enviar arbitrariamente comandos de reinicio al BMC, causando una condición de Denegación de Servicio (DoS). Este problema afecta a: Lanner Inc IAC-AST2500A versión de firmware estándar 1.10.0 • https://www.nozominetworks.com/blog/vulnerabilities-in-bmc-firmware-affect-ot-iot-device-security-part-1 https://www.nozominetworks.com/labs/vulnerability-advisories/cve-2021-26733 • CWE-284: Improper Access Control •
CVSS: 6.5EPSS: 0%CPEs: 2EXPL: 0CVE-2021-44776 – spx_restservice SubNet_handler_func Broken Access Control
https://notcve.org/view.php?id=CVE-2021-44776
A broken access control vulnerability in the SubNet_handler_func function of spx_restservice allows an attacker to arbitrarily change the security access rights to KVM and Virtual Media functionalities. This issue affects: Lanner Inc IAC-AST2500A standard firmware version 1.10.0. Una vulnerabilidad de control de acceso rota en la función SubNet_handler_func de spx_restservice permite a un atacante cambiar arbitrariamente los derechos de acceso de seguridad a las funcionalidades de KVM y Virtual Media. Este problema afecta: Lanner Inc IAC-AST2500A versión de firmware estándar 1.10.0 • https://www.nozominetworks.com/blog/vulnerabilities-in-bmc-firmware-affect-ot-iot-device-security-part-1 https://www.nozominetworks.com/labs/vulnerability-advisories/cve-2021-44776 • CWE-284: Improper Access Control •
CVSS: 6.5EPSS: 0%CPEs: 2EXPL: 0CVE-2021-26732 – spx_restservice First_network_func Broken Access Control
https://notcve.org/view.php?id=CVE-2021-26732
A broken access control vulnerability in the First_network_func function of spx_restservice allows an attacker to arbitrarily change the network configuration of the BMC. This issue affects: Lanner Inc IAC-AST2500A standard firmware version 1.10.0. Una vulnerabilidad de control de acceso rota en la función First_network_func de spx_restservice permite a un atacante cambiar arbitrariamente la configuración de red del BMC. Este problema afecta: Lanner Inc IAC-AST2500A versión de firmware estándar 1.10.0 • https://www.nozominetworks.com/blog/vulnerabilities-in-bmc-firmware-affect-ot-iot-device-security-part-1 https://www.nozominetworks.com/labs/vulnerability-advisories/cve-2021-26732 • CWE-284: Improper Access Control •