<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: lancom-systems</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2020-23055: ANCOM WLAN Controller (Wireless Series &amp; Hotspot) WLC-1000 &amp; WLC-4006 was discovered to contain multiple cross</title><link>https://patchthecve.com/cve/CVE-2020-23055.html</link><guid>https://patchthecve.com/cve/CVE-2020-23055.html</guid><pubDate>Wed, 17 Jun 2026 03:04:31 +0000</pubDate><description>MEDIUM 5.4: ANCOM WLAN Controller (Wireless Series &amp; Hotspot) WLC-1000 &amp; WLC-4006 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities in the /authen/start/ module via the userid and password parameters.</description></item><item><title>CVE-2021-33903: In LCOS 10.40 to 10.42.0473-RU3 with SNMPv3 enabled on LANCOM devices, changing the password of the root user </title><link>https://patchthecve.com/cve/CVE-2021-33903.html</link><guid>https://patchthecve.com/cve/CVE-2021-33903.html</guid><pubDate>Wed, 17 Jun 2026 03:55:21 +0000</pubDate><description>HIGH 8.8: In LCOS 10.40 to 10.42.0473-RU3 with SNMPv3 enabled on LANCOM devices, changing the password of the root user via the CLI does not change the password of the root user for SNMPv3 access. (However, changing the password of the root user via LANconfig does change the password of the root user for SNMP</description></item><item><title>CVE-2021-31538: LANCOM R&amp;S Unified Firewall (UF) devices running LCOS FX 10.5 allow Relative Path Traversal.</title><link>https://patchthecve.com/cve/CVE-2021-31538.html</link><guid>https://patchthecve.com/cve/CVE-2021-31538.html</guid><pubDate>Wed, 17 Jun 2026 03:51:58 +0000</pubDate><description>HIGH 7.5: LANCOM R&amp;S Unified Firewall (UF) devices running LCOS FX 10.5 allow Relative Path Traversal.</description></item></channel></rss>