PatchTheCVElannerinc vulnerabilities
Recent CVEs affecting lannerinc products. 13 tracked.
lannerinc has 13 tracked vulnerabilities, 5 critical. A fixed release or vendor patch exists for 0. Most recent: 2022-10-24. Highest priority: CVE-2021-26729 (score 61/100).
- CVE-2021-4228 MEDIUM 5.8 MITIGATE Use of hard-coded TLS certificate by default allows an attacker to perform Man-in-the-Middle (MitM) attacks ev
- CVE-2021-46279 MEDIUM 5.8 MITIGATE Session fixation and insufficient session expiration vulnerabilities allow an attacker to perfom session hijac
- CVE-2021-45925 MEDIUM 5.3 MITIGATE Observable discrepancies in the login process allow an attacker to guess legitimate user names registered in t
- CVE-2021-44776 MEDIUM 6.5 MITIGATE A broken access control vulnerability in the SubNet_handler_func function of spx_restservice allows an attacke
- CVE-2021-44769 MEDIUM 4.9 MITIGATE An improper input validation vulnerability in the TLS certificate generation function allows an attacker to ca
- CVE-2021-44467 MEDIUM 5.3 MITIGATE A broken access control vulnerability in the KillDupUsr_func function of spx_restservice allows an attacker to
- CVE-2021-26733 MEDIUM 5.3 MITIGATE A broken access control vulnerability in the FirstReset_handler_func function of spx_restservice allows an att
- CVE-2021-26732 MEDIUM 6.5 MITIGATE A broken access control vulnerability in the First_network_func function of spx_restservice allows an attacker
- CVE-2021-26731 CRITICAL 9.1 MITIGATE Command injection and multiple stack-based buffer overflows vulnerabilities in the modifyUserb_func function o
- CVE-2021-26730 CRITICAL 10.0 MITIGATE A stack-based buffer overflow vulnerability in a subfunction of the Login_handler_func function of spx_restser
- CVE-2021-26729 CRITICAL 10.0 MITIGATE Command injection and multiple stack-based buffer overflows vulnerabilities in the Login_handler_func function
- CVE-2021-26728 CRITICAL 10.0 MITIGATE Command injection and stack-based buffer overflow vulnerabilities in the KillDupUsr_func function of spx_rests
- CVE-2021-26727 CRITICAL 10.0 MITIGATE Multiple command injections and stack-based buffer overflows vulnerabilities in the SubNet_handler_func functi
FAQ
How do I fix lannerinc vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is lannerinc being exploited right now?
None of the tracked lannerinc CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which lannerinc CVE should I patch first?
CVE-2021-26729 currently ranks highest (61/100): Command injection and multiple stack-based buffer overflows vulnerabilities in the Login_handler_func function.