Lannerinc IAC-AST2500A FIRMWARE 1.10.0
Approved changes feed: RSS · Atom
cpe:2.3:o:lannerinc:iac-ast2500a_firmware:1.10.0:*:*:*:*:*:*:*
part: o version: 1.10.0 update: *
| Vendor | Lannerinc (792851c6-5c5b-5bd0-bdec-6a13c4b57902) |
|---|---|
| Product | Iac Ast2500A Firmware (80a0de4c-5197-5610-aaab-15e646d9367e) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-46279 |
vulnerable | 2026-06-08 05:38:03.186217 |
Session Fixation and Insufficient Session Expiration
MEDIUM (5.8)
Session fixation and insufficient session expiration vulnerabilities allow an attacker to perfom session hijacking attacks against users. This issue affects: Lanner Inc IAC-AST2500A standard firmware version 1.10.0.
Published: 2022-10-24T00:00:00.000Z
Updated: 2025-05-07T13:43:25.886Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-45925 |
vulnerable | 2026-06-08 05:36:49.566350 |
Username Enumeration
MEDIUM (5.3)
Observable discrepancies in the login process allow an attacker to guess legitimate user names registered in the BMC. This issue affects: Lanner Inc IAC-AST2500A standard firmware version 1.10.0.
Published: 2022-10-24T00:00:00.000Z
Updated: 2025-05-07T13:51:47.591Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-44776 |
vulnerable | 2026-06-08 05:36:47.487338 |
spx_restservice SubNet_handler_func Broken Access Control
MEDIUM (6.5)
A broken access control vulnerability in the SubNet_handler_func function of spx_restservice allows an attacker to arbitrarily change the security access rights to KVM and Virtual Media functionalities. This issue affects: Lanner Inc IAC-AST2500A standard firmware version 1.10.0.
Published: 2022-10-24T00:00:00.000Z
Updated: 2025-05-07T15:52:23.428Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-44769 |
vulnerable | 2026-06-08 05:36:47.486229 |
TLS Certificate Generation Function Improper Input Validation
MEDIUM (4.9)
An improper input validation vulnerability in the TLS certificate generation function allows an attacker to cause a Denial-of-Service (DoS) condition which can only be reverted via a factory reset. This issue affects: Lanner Inc IAC-AST2500A standard firmware version 1.10.0.
Published: 2022-10-24T00:00:00.000Z
Updated: 2025-05-07T15:49:39.098Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-44467 |
vulnerable | 2026-06-08 05:36:45.818313 |
spx_restservice KillDupUsr_func Broken Access Control
MEDIUM (5.3)
A broken access control vulnerability in the KillDupUsr_func function of spx_restservice allows an attacker to arbitrarily terminate active sessions of other users, causing a Denial-of-Service (DoS) condition, if an input parameter is correctly guessed. This issue affects: Lanner Inc IAC-AST2500A standard firmware version 1.10.0.
Published: 2022-10-24T00:00:00.000Z
Updated: 2025-05-07T15:48:23.271Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-26733 |
vulnerable | 2026-06-08 05:30:45.190026 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-26732 |
vulnerable | 2026-06-08 05:30:45.189451 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-26731 |
vulnerable | 2026-06-08 05:30:45.189051 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-26730 |
vulnerable | 2026-06-08 05:30:45.188530 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-26729 |
vulnerable | 2026-06-08 05:30:45.188113 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-26728 |
vulnerable | 2026-06-08 05:30:45.187578 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-26727 |
vulnerable | 2026-06-08 05:30:45.186335 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.