CVE-2021-44776— spx_restservice SubNet_handler_func Broken Access Control
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2021-44776
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
spx_restservice SubNet_handler_func Broken Access Control
Source: NVD (National Vulnerability Database)
Vulnerability Description
A broken access control vulnerability in the SubNet_handler_func function of spx_restservice allows an attacker to arbitrarily change the security access rights to KVM and Virtual Media functionalities. This issue affects: Lanner Inc IAC-AST2500A standard firmware version 1.10.0.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
Source: NVD (National Vulnerability Database)
Vulnerability Type
访问控制不恰当
Source: NVD (National Vulnerability Database)
Vulnerability Title
Lanner IAC-AST2500A 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Lanner IAC-AST2500A是中国立端（Lanner）公司的一个模块和加速卡。适合 Lanner 网络设备，以支持基于 IPMI 标准的系统运行状况远程管理和监控。 Lanner IAC-AST2500A standard firmware 1.00.0版本存在安全漏洞，该漏洞源于其spx_restservice的SubNet_handler_func函数中不正确的访问控制允许攻击者任意更改KVM和虚拟媒体功能的安全访问权限。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Lanner Inc | IAC-AST2500A | 1.10.0 | - |
II. Public POCs for CVE-2021-44776
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2021-44776
请登录查看更多情报信息。
Same Patch Batch · Lanner Inc · 2022-10-24 · 13 CVEs total
| CVE-2021-26727 | 10.0 CRITICAL | spx_restservice SubNet_handler_func Multiple Command Injections and Stack-Based Buffer Ove |
| CVE-2021-26728 | 10.0 CRITICAL | spx_restservice KillDupUsr_func Command Injection and Stack-Based Buffer Overflow |
| CVE-2021-26729 | 10.0 CRITICAL | spx_restservice Login_handler_func Command Injection and Multiple Stack-Based Buffer Overf |
| CVE-2021-26730 | 10.0 CRITICAL | spx_restservice Login_handler_func Subfunction Stack-Based Buffer Overflow |
| CVE-2021-26731 | 9.1 CRITICAL | spx_restservice modifyUserb_func Command Injection and Multiple Stack-Based Buffer Overflo |
| CVE-2021-26732 | 6.5 MEDIUM | spx_restservice First_network_func Broken Access Control |
| CVE-2021-4228 | 5.8 MEDIUM | Hard-coded TLS Certificate |
| CVE-2021-46279 | 5.8 MEDIUM | Session Fixation and Insufficient Session Expiration |
| CVE-2021-26733 | 5.3 MEDIUM | spx_restservice FirstReset_handler_func Broken Access Control |
| CVE-2021-44467 | 5.3 MEDIUM | spx_restservice KillDupUsr_func Broken Access Control |
| CVE-2021-45925 | 5.3 MEDIUM | Username Enumeration |
| CVE-2021-44769 | 4.9 MEDIUM | TLS Certificate Generation Function Improper Input Validation |
IV. Related Vulnerabilities
Same product: IAC-AST2500A
- CVE-2021-26727
spx_restservice SubNet_handler_func Multiple Command Injecti - CVE-2021-26728
spx_restservice KillDupUsr_func Command Injection and Stack- - CVE-2021-26729
spx_restservice Login_handler_func Command Injection and Mul - CVE-2021-26730
spx_restservice Login_handler_func Subfunction Stack-Based B - CVE-2021-26731
spx_restservice modifyUserb_func Command Injection and Multi
Same vendor: Lanner Inc
- CVE-2021-26727
spx_restservice SubNet_handler_func Multiple Command Injecti - CVE-2021-26728
spx_restservice KillDupUsr_func Command Injection and Stack- - CVE-2021-26729
spx_restservice Login_handler_func Command Injection and Mul - CVE-2021-26730
spx_restservice Login_handler_func Subfunction Stack-Based B - CVE-2021-26731
spx_restservice modifyUserb_func Command Injection and Multi
Same weakness: CWE-284
- CVE-2026-8233
Dotouch XproUPF access control - CVE-2026-42569
phpvms: /importer authorization bypass causing full database - CVE-2026-42205
Avo: Broken Access Control: Unauthorized Execution of Arbitr - CVE-2026-41487
Langfuse: Improper role-based-access control in Langfuse LLM - CVE-2026-42278
UltraDAG: Smart Account Spending Policy Bypass via Pockets
V. Comments for CVE-2021-44776
No comments yet