Check Point Advisories

Lantronix PremierWave 2050 Multiple Vulnerabilities (CVE-2021-21872; CVE-2021-21873; CVE-2021-21874; CVE-2021-21875; CVE-2021-21881; CVE-2021-21882; CVE-2021-21883; CVE-2021-21884; CVE-2021-21888)

Vulnerability
Protection

Check Point Reference:	CPAI-2021-1157
Date Published:	14 Apr 2022
Severity:	Critical
Last Updated:	Thursday 14 April, 2022
Source:
Industry Reference:	CVE-2021-21872 CVE-2021-21873 CVE-2021-21874 CVE-2021-21875 CVE-2021-21881 CVE-2021-21882 CVE-2021-21883 CVE-2021-21884 CVE-2021-21888
Protection Provided by:	Security Gateway R81, R80, R77, R75
Who is Vulnerable?	Lantronix PremierWave 2050 8.9.0.0R4
Vulnerability Description	Multiple vulnerabilities exist in Lantronix PremierWave 2050. Successful exploitation of these vulnerabilities could allow a remote attacker to execute arbitrary commands on the affected system.

Protection Overview

This protection detects attempts to exploit this vulnerability.

In order for the protection to be activated, update your Security Gateway product to the latest IPS update. For information on how to update IPS, go to SBP-2006-05, click on Protection tab and select the version of your choice.

Security Gateway R81 / R80 / R77 / R75

In the IPS tab, click Protections and find the Lantronix PremierWave 2050 Multiple Vulnerabilities protection using the Search tool and Edit the protection's settings.
Install policy on all Security Gateways.

This protection's log will contain the following information:

Attack Name: Application Servers Protection Violation.
Attack Information: Lantronix PremierWave 2050 Multiple Vulnerabilities