CVE-2021-44467

CVE-2021-44467 is a broken access control vulnerability in the KillDupUsr_func function of the spx_restservice, affecting Lanner Inc IAC-AST2500A standard firmware version 1.10.0. An unauthenticated attacker can exploit this by guessing an input parameter to terminate other users' active sessions. This leads to a Denial-of-Service (DoS) condition, reflected in its CVSS score of 7.5 (HIGH) due to its network-based attack vector and low attack complexity. There is currently no known active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion surrounding this vulnerability.