Vulnerability Spotlight: Vulnerabilities in Lantronix Premier Wave 2050 could lead to code execution, file deletion
Summary: Cisco Talos discovered multiple vulnerabilities in Lantronix's PremierWave 2050 embedded Wi-Fi module, including twelve that could allow arbitrary code execution through its Web Manager and several directory traversal flaws that could enable file deletion, overwrite, or disclosure. Lantronix fixed the issues in version 9.10.0.0R4, and Talos released SNORT rules 57753-57759, 57764-57769, 57777-57779, 57783, 57784, 57796, 57800, 57801, 57805, 57806 and 57792-57795 to detect exploitation attempts.
Key Takeaway: The code-execution flaws require the attacker to authenticate to the Web Manager first, so a single set of valid credentials on an internet-reachable PremierWave 2050 is the difference between a login and arbitrary code running on the device.
Read the original at Cisco Talos ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2021-21878CVE-2021-21886CVE-2021-21896
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026