PatchTheCVEiac-ast2500a firmware vulnerabilities and fixes
Recent CVEs affecting iac-ast2500a firmware, with upgrade or downgrade steps. 12 tracked.
Also searched as: iac ast2500a firmware, iac-ast2500afirmware.
iac-ast2500a firmware has 12 tracked vulnerabilities, 5 critical. A fixed release or vendor patch exists for 0. Most recent: 2022-10-24. Highest priority: CVE-2021-26729 (score 61/100).
- CVE-2021-46279 MEDIUM 5.8 MITIGATE Session fixation and insufficient session expiration vulnerabilities allow an attacker to perfom session hijac
- CVE-2021-45925 MEDIUM 5.3 MITIGATE Observable discrepancies in the login process allow an attacker to guess legitimate user names registered in t
- CVE-2021-44776 MEDIUM 6.5 MITIGATE A broken access control vulnerability in the SubNet_handler_func function of spx_restservice allows an attacke
- CVE-2021-44769 MEDIUM 4.9 MITIGATE An improper input validation vulnerability in the TLS certificate generation function allows an attacker to ca
- CVE-2021-44467 MEDIUM 5.3 MITIGATE A broken access control vulnerability in the KillDupUsr_func function of spx_restservice allows an attacker to
- CVE-2021-26733 MEDIUM 5.3 MITIGATE A broken access control vulnerability in the FirstReset_handler_func function of spx_restservice allows an att
- CVE-2021-26732 MEDIUM 6.5 MITIGATE A broken access control vulnerability in the First_network_func function of spx_restservice allows an attacker
- CVE-2021-26731 CRITICAL 9.1 MITIGATE Command injection and multiple stack-based buffer overflows vulnerabilities in the modifyUserb_func function o
- CVE-2021-26730 CRITICAL 10.0 MITIGATE A stack-based buffer overflow vulnerability in a subfunction of the Login_handler_func function of spx_restser
- CVE-2021-26729 CRITICAL 10.0 MITIGATE Command injection and multiple stack-based buffer overflows vulnerabilities in the Login_handler_func function
- CVE-2021-26728 CRITICAL 10.0 MITIGATE Command injection and stack-based buffer overflow vulnerabilities in the KillDupUsr_func function of spx_rests
- CVE-2021-26727 CRITICAL 10.0 MITIGATE Multiple command injections and stack-based buffer overflows vulnerabilities in the SubNet_handler_func functi
FAQ
How do I fix iac-ast2500a firmware vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is iac-ast2500a firmware being exploited right now?
None of the tracked iac-ast2500a firmware CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which iac-ast2500a firmware CVE should I patch first?
CVE-2021-26729 currently ranks highest (61/100): Command injection and multiple stack-based buffer overflows vulnerabilities in the Login_handler_func function.