PoC Index85,101 CVEs with PoCs

CVE-2021-21874

CRITICAL 9.1EPSS 3.0%

A specially-crafted HTTP request can lead to arbitrary command execution in DSA keypasswd parameter. An attacker can make an authenticated HTTP request to trigger this vulnerability.

Affected
Lantronix
CVSS v3.1 NVD
9.1 CRITICALCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
CVSS v3.0 CISCO
9.1 CRITICALCVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
CVSS v2.0 NVD
9.0 HIGHAV:N/AC:L/Au:S/C:C/I:C/A:C
EPSS
3.01% chance of exploitation in the next 30 days, 87th percentile
Published
2021-12-22
Updated
2024-08-03

Proof-of-concept exploits (1)

References