CVE-2021-26729 - CVE House

Back to Database

Status published Critical CVE-2021-26729

spx_restservice Login_handler_func Command Injection and Multiple Stack-Based Buffer Overflows

10 CVSS

Vulnerability Description

Command injection and multiple stack-based buffer overflows vulnerabilities in the Login_handler_func function of spx_restservice allow an attacker to execute arbitrary code with the same privileges as the server user (root). This issue affects: Lanner Inc IAC-AST2500A standard firmware version 1.10.0.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2021-26729

Check My Exposure

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

Andrea Palanca of Nozomi Networks found this bug during a security research activity.

References

More from Lanner Inc

View All →

Hard-coded TLS Certificate

Session Fixation and Insufficient Session Expiration

Username Enumeration

spx_restservice SubNet_handler_func Broken Access Control

TLS Certificate Generation Function Improper Input Validation

Affected Vendor

Lanner Inc

View all reports →

Affected Software

IAC-AST2500A

Vulnerable Versions:

1.10.0

Timeline

Official Publish: October 24th, 2022

Last Modified: May 7th, 2025

Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Weaknesses (CWE)

MITRE ATT&CK TTPs

T1190 Exploit Public-Facing Application

T1059 Command and Scripting Interpreter

T1505.003 Web Shell

T1105 Ingress Tool Transfer

Command and Control

T1565.002 Stored Data Manipulation

T1068 Exploitation for Privilege Escalation

Privilege Escalation

T1055 Process Injection

Defense Evasion

T1485 Data Destruction