PoC Index85,103 CVEs with PoCs

CVE-2021-21873

CRITICAL 9.1EPSS 3.0%

A specially-crafted HTTP request can lead to arbitrary command execution in RSA keypasswd parameter. An attacker can make an authenticated HTTP request to trigger this vulnerability.

Affected
Lantronix
CVSS v3.1 NVD
9.1 CRITICALCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
CVSS v3.0 CISCO
9.1 CRITICALCVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
CVSS v2.0 NVD
9.0 HIGHAV:N/AC:L/Au:S/C:C/I:C/A:C
EPSS
3.01% chance of exploitation in the next 30 days, 87th percentile
Published
2021-12-22
Updated
2024-08-03

Proof-of-concept exploits (1)

References