CVE-2021-46279 — Session Fixation and Insufficient Session Expiration

Description (CNA)

Session fixation and insufficient session expiration vulnerabilities allow an attacker to perfom session hijacking attacks against users. This issue affects: Lanner Inc IAC-AST2500A standard firmware version 1.10.0.

Affected (CNA)

Vendor / product	Versions
Lanner Inc / IAC-AST2500A	affected 1.10.0

CWE

CWE-384, CWE-613

References

https://www.nozominetworks.com/blog/vulnerabilities-in-bmc-firmware-affect-ot-iot-device-security-part-1/
https://www.nozominetworks.com/labs/vulnerability-advisories/cve-2021-46279/

ADP enrichment

CVE

No English description supplied.

https://www.nozominetworks.com/blog/vulnerabilities-in-bmc-firmware-affect-ot-iot-device-security-part-1/
https://www.nozominetworks.com/labs/vulnerability-advisories/cve-2021-46279/

CISA-ADP

No English description supplied.

No references supplied.