GCVE - cpe:2.3:h:lannerinc:iac-ast2500a:-:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:h:lannerinc:iac-ast2500a:-:*:*:*:*:*:*:*

part: h version: - update: *

Vendor	Lannerinc (`792851c6-5c5b-5bd0-bdec-6a13c4b57902`)
Product	Iac Ast2500A (`f3f31e5f-9d4b-5acc-af7b-b3451e7d2c84`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2021-46279`	not_vulnerable	2026-06-08 05:38:03.187233	Session Fixation and Insufficient Session Expiration MEDIUM (5.8) Session fixation and insufficient session expiration vulnerabilities allow an attacker to perfom session hijacking attacks against users. This issue affects: Lanner Inc IAC-AST2500A standard firmware version 1.10.0. Published: 2022-10-24T00:00:00.000Z Updated: 2025-05-07T13:43:25.886Z Open on db.gcve.eu Reference links https://www.nozominetworks.com/blog/vulnerabilities-in-bmc-firmware-affect-ot-iot-device-security-part-1/ https://www.nozominetworks.com/labs/vulnerability-advisories/cve-2021-46279/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-45925`	not_vulnerable	2026-06-08 05:36:49.566374	Username Enumeration MEDIUM (5.3) Observable discrepancies in the login process allow an attacker to guess legitimate user names registered in the BMC. This issue affects: Lanner Inc IAC-AST2500A standard firmware version 1.10.0. Published: 2022-10-24T00:00:00.000Z Updated: 2025-05-07T13:51:47.591Z Open on db.gcve.eu Reference links https://www.nozominetworks.com/blog/vulnerabilities-in-bmc-firmware-affect-ot-iot-device-security-part-1/ https://www.nozominetworks.com/labs/vulnerability-advisories/cve-2021-45925/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-44776`	not_vulnerable	2026-06-08 05:36:47.487498	spx_restservice SubNet_handler_func Broken Access Control MEDIUM (6.5) A broken access control vulnerability in the SubNet_handler_func function of spx_restservice allows an attacker to arbitrarily change the security access rights to KVM and Virtual Media functionalities. This issue affects: Lanner Inc IAC-AST2500A standard firmware version 1.10.0. Published: 2022-10-24T00:00:00.000Z Updated: 2025-05-07T15:52:23.428Z Open on db.gcve.eu Reference links https://www.nozominetworks.com/blog/vulnerabilities-in-bmc-firmware-affect-ot-iot-device-security-part-1/ https://www.nozominetworks.com/labs/vulnerability-advisories/cve-2021-44776/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-44769`	not_vulnerable	2026-06-08 05:36:47.486254	TLS Certificate Generation Function Improper Input Validation MEDIUM (4.9) An improper input validation vulnerability in the TLS certificate generation function allows an attacker to cause a Denial-of-Service (DoS) condition which can only be reverted via a factory reset. This issue affects: Lanner Inc IAC-AST2500A standard firmware version 1.10.0. Published: 2022-10-24T00:00:00.000Z Updated: 2025-05-07T15:49:39.098Z Open on db.gcve.eu Reference links https://www.nozominetworks.com/blog/vulnerabilities-in-bmc-firmware-affect-ot-iot-device-security-part-1/ https://www.nozominetworks.com/labs/vulnerability-advisories/cve-2021-44769/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-44467`	not_vulnerable	2026-06-08 05:36:45.818862	spx_restservice KillDupUsr_func Broken Access Control MEDIUM (5.3) A broken access control vulnerability in the KillDupUsr_func function of spx_restservice allows an attacker to arbitrarily terminate active sessions of other users, causing a Denial-of-Service (DoS) condition, if an input parameter is correctly guessed. This issue affects: Lanner Inc IAC-AST2500A standard firmware version 1.10.0. Published: 2022-10-24T00:00:00.000Z Updated: 2025-05-07T15:48:23.271Z Open on db.gcve.eu Reference links https://www.nozominetworks.com/blog/vulnerabilities-in-bmc-firmware-affect-ot-iot-device-security-part-1/ https://www.nozominetworks.com/labs/vulnerability-advisories/cve-2021-44467/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-26733`	not_vulnerable	2026-06-08 05:30:45.190047	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-26732`	not_vulnerable	2026-06-08 05:30:45.189567	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-26731`	not_vulnerable	2026-06-08 05:30:45.189075	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-26730`	not_vulnerable	2026-06-08 05:30:45.188640	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-26729`	not_vulnerable	2026-06-08 05:30:45.188138	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-26728`	not_vulnerable	2026-06-08 05:30:45.187603	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-26727`	not_vulnerable	2026-06-08 05:30:45.187054	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.