lcos vulnerabilities and fixes
Recent CVEs affecting lcos, with upgrade or downgrade steps. 2 tracked.
lcos has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2021-10-22. Highest priority: CVE-2021-33903 (score 47/100).
- CVE-2021-33903 HIGH 8.8 UPGRADE In LCOS 10.40 to 10.42.0473-RU3 with SNMPv3 enabled on LANCOM devices, changing the password of the root user
- CVE-2020-23055 MEDIUM 5.4 MITIGATE ANCOM WLAN Controller (Wireless Series & Hotspot) WLC-1000 & WLC-4006 was discovered to contain multiple cross
FAQ
How do I fix lcos vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is lcos being exploited right now?
None of the tracked lcos CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which lcos CVE should I patch first?
CVE-2021-33903 currently ranks highest (47/100): In LCOS 10.40 to 10.42.0473-RU3 with SNMPv3 enabled on LANCOM devices, changing the password of the root user .