CVE-2021-4228

HighCVSS 7.4/10Last modified Jun 17, 2026

Description

Use of hard-coded TLS certificate by default allows an attacker to perform Man-in-the-Middle (MitM) attacks even in the presence of the HTTPS connection. This issue affects: Lanner Inc IAC-AST2500A standard firmware version 1.00.0.

Metrics

CVSS 3.1 7.4/10CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

Weakness enumeration

CWE-321CWE-798

Affected software

VendorProductVersions
Lanner IncIAC-AST2500A1.00.0

References

Timeline

Published
Oct 24, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-422805.5Windows Feedback Hub Elevation of Privilege VulnerabilityCVE-2021-422827.5Active Directory Domain Services Elevation of Privilege VulnerabilityCVE-2021-422838.8NTFS Elevation of Privilege VulnerabilityCVE-2021-422846.8Windows Hyper-V Denial of Service VulnerabilityCVE-2021-422857.8Windows Kernel Elevation of Privilege VulnerabilityCVE-2021-422867.8Windows Core Shell SI Host Extension Framework for Composable Shell Elevation of Privilege VulnerabilityCVE-2021-422877.5Active Directory Domain Services Elevation of Privilege VulnerabilityCVE-2021-422885.7Windows Hello Security Feature Bypass VulnerabilityCVE-2021-42298.8A vulnerability was found in ua-parser-js 0.7.29/0.8.0/1.0.0. It has been rated as critical. This issue affects the crypto mining component CVE-2021-422917.5Active Directory Domain Services Elevation of Privilege VulnerabilityCVE-2021-422927.8Microsoft Excel Security Feature Bypass VulnerabilityCVE-2021-422936.5Microsoft Jet Red Database Engine and Access Connectivity Engine Elevation of Privilege Vulnerability
CVE-2021-4228: High severity, CVSS 7.4 | Vulnix