A specially-crafted HTTP request can lead to arbitrary command execution in EC keypasswd parameter. An attacker can make an authenticated HTTP request to trigger this vulnerability.
Search vulnerabilities
CVE-2021-21875
CVSS 3.1 · 9.1 Critical
EPSS 3.0%
KEV · Not listed
Vendors
Products
CVE-2021-21874
A specially-crafted HTTP request can lead to arbitrary command execution in DSA keypasswd parameter. An attacker can make an authenticated HTTP request to trigger this vulnerability.
CVSS 3.1 · 9.1 Critical
EPSS 3.0%
KEV · Not listed
Vendors
Products
CVE-2021-21873
A specially-crafted HTTP request can lead to arbitrary command execution in RSA keypasswd parameter. An attacker can make an authenticated HTTP request to trigger this vulnerability.
CVSS 3.1 · 9.1 Critical
EPSS 3.0%
KEV · Not listed
Vendors
Products
CVE-2021-21872
An OS command injection vulnerability exists in the Web Manager Diagnostics: Traceroute functionality of Lantronix PremierWave 2050 8.9.0.0R4. A specially-crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.
CVSS 3.1 · 9.9 Critical
EPSS 6.1%
KEV · Not listed
Vendors
Products