CVE-2021-44769

low-risk

Published 2022-10-24

An improper input validation vulnerability in the TLS certificate generation function allows an attacker to cause a Denial-of-Service (DoS) condition which can only be reverted via a factory reset. This issue affects: Lanner Inc IAC-AST2500A standard firmware version 1.10.0.

Do I need to act?

0.18% chance of exploitation

EPSS score — low exploit probability

Not on CISA KEV list

No confirmed active exploitation reported to CISA

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

CVSS 4.9/10 Medium

NETWORK / LOW complexity

Affected Products (1)

Iac-Ast2500A Firmware

Affected Vendors

Lannerinc

References (4)

Third Party Advisory https://www.nozominetworks.com/blog/vulnerabilities-in-bmc-firmware-affect-ot-io...

Third Party Advisory https://www.nozominetworks.com/labs/vulnerability-advisories/cve-2021-44769/

Third Party Advisory https://www.nozominetworks.com/blog/vulnerabilities-in-bmc-firmware-affect-ot-io...

Third Party Advisory https://www.nozominetworks.com/labs/vulnerability-advisories/cve-2021-44769/

/ 100

low-risk

Severity 20/34 · Moderate

Exploitability 1/34 · Minimal

Exposure 5/34 · Minimal