Lannerinc's vulnerability profile centers on the IAC AST2500 series industrial automation controller and its associated firmware, embedded devices that manage critical infrastructure operations. Vulnerabilities affecting this vendor skew strongly toward critical-severity outcomes and recur through memory-safety and access-control weakness classes—out-of-bounds writes, stack-based buffer overflows, improper access control, code injection, and command injection—that are characteristic of embedded firmware with direct hardware interaction and minimal runtime protection. Defenders should prioritize patches for this device class in operational technology environments where these controllers sit on network boundaries; live severity and exploitation figures are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Lannerinc over time
Signals from CVEs in this vendor scope (13 CVEs).
13 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2021-26731CRITICAL Command injection and multiple stack-based buffer overflows vulnerabilities in the modifyUserb_func function of spx_restservice allow an authenticated attacker to execute arbitrary | Oct 24, 2022 | 9.8 | 32 | NO | NO |
CVE-2021-26730CRITICAL A stack-based buffer overflow vulnerability in a subfunction of the Login_handler_func function of spx_restservice allows an attacker to execute arbitrary code with the same privil | Oct 24, 2022 | 9.8 | 31 | NO | NO |
CVE-2021-26729CRITICAL Command injection and multiple stack-based buffer overflows vulnerabilities in the Login_handler_func function of spx_restservice allow an attacker to execute arbitrary code with t | Oct 24, 2022 | 9.8 | 31 | NO | NO |
CVE-2021-26728CRITICAL Command injection and stack-based buffer overflow vulnerabilities in the KillDupUsr_func function of spx_restservice allow an attacker to execute arbitrary code with the same privi | Oct 24, 2022 | 9.8 | 31 | NO | NO |
CVE-2021-26727CRITICAL Multiple command injections and stack-based buffer overflows vulnerabilities in the SubNet_handler_func function of spx_restservice allow an attacker to execute arbitrary code with | Oct 24, 2022 | 9.8 | 31 | NO | NO |
CVE-2021-4228HIGH Use of hard-coded TLS certificate by default allows an attacker to perform Man-in-the-Middle (MitM) attacks even in the presence of the HTTPS connection. This issue affects: Lanner | Oct 24, 2022 | 7.4 | 29 | NO | NO |
CVE-2021-44467HIGH A broken access control vulnerability in the KillDupUsr_func function of spx_restservice allows an attacker to arbitrarily terminate active sessions of other users, causing a Denia | Oct 24, 2022 | 7.5 | 25 | NO | NO |
CVE-2021-26733HIGH A broken access control vulnerability in the FirstReset_handler_func function of spx_restservice allows an attacker to arbitrarily send reboot commands to the BMC, causing a Denial | Oct 24, 2022 | 7.5 | 25 | NO | NO |
CVE-2021-46279HIGH Session fixation and insufficient session expiration vulnerabilities allow an attacker to perfom session hijacking attacks against users. This issue affects: Lanner Inc IAC-AST2500 | Oct 24, 2022 | 8.8 | 22 | NO | NO |
CVE-2021-45925MEDIUM Observable discrepancies in the login process allow an attacker to guess legitimate user names registered in the BMC. This issue affects: Lanner Inc IAC-AST2500A standard firmware | Oct 24, 2022 | 5.3 | 21 | NO | NO |
Signals from CVEs in this vendor scope (13 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Lannerinc.
Media articles that mention a CVE ID that affects a product developed by Lannerinc — matched by CVE ID, not by vendor name.