BAB TECHNOLOGIE GmbH eibPort V3 prior version 3.9.1 allow unauthenticated attackers to access uncontrolled the login service at /webif/SecurityModule in a brute force attack. The password could be weak and default username is known as 'admin'. This is usable and part of an attack chain to gain SSH root access.
References
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2021-09-09T17:35:00

Updated: 2024-08-03T21:55:12.234Z

Reserved: 2021-03-19T00:00:00

Link: CVE-2021-28909

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2021-09-09T18:15:08.683

Modified: 2024-11-21T06:00:23.030

Link: CVE-2021-28909

cve-icon Redhat

No data.