BAB TECHNOLOGIE GmbH eibPort V3 prior version 3.9.1 allow the user to set a weak password because the strength is shown in configuration tool, but finally not enforced. This is usable and part of an attack chain to gain SSH root access.
Metrics
Affected Vendors & Products
References
Link | Providers |
---|---|
https://psytester.github.io/CVE-2021-28914 |
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2021-09-09T18:03:32
Updated: 2024-08-03T21:55:12.271Z
Reserved: 2021-03-19T00:00:00
Link: CVE-2021-28914
Vulnrichment
No data.
NVD
Status : Modified
Published: 2021-09-09T19:15:11.750
Modified: 2024-11-21T06:00:23.713
Link: CVE-2021-28914
Redhat
No data.