Description
A security vulnerability originally reported in the SYNC2101 product, and applicable to specific sub-families of SYNC devices, allows an attacker to download the configuration file used in the device and apply a modified configuration file back to the device. The attack requires network access to the SYNC device and knowledge of its IP address. The attack exploits the unsecured communication channel used between the administration tool Easyconnect and the SYNC device (in the affected family of SYNC products).
Published: 2022-01-06
Score: 8.1 High
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

No analysis available yet.

Remediation

No remediation available yet.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
EUVD EUVD EUVD-2021-31391 A security vulnerability originally reported in the SYNC2101 product, and applicable to specific sub-families of SYNC devices, allows an attacker to download the configuration file used in the device and apply a modified configuration file back to the device. The attack requires network access to the SYNC device and knowledge of its IP address. The attack exploits the unsecured communication channel used between the administration tool Easyconnect and the SYNC device (in the affected family of SYNC products).
History

No history.

Subscriptions

Kalkitech Sync2000-m1 Sync2000-m1 Firmware Sync2000-m2 Sync2000-m2 Firmware Sync2000-m4 Sync2000-m4 Firmware Sync2101-m1 Sync2101-m1 Firmware Sync2101-m2 Sync2101-m2 Firmware Sync2101-m6 Sync2101-m6 Firmware Sync2101-m7 Sync2101-m7 Firmware Sync2101-m8 Sync2101-m8 Firmware Sync2111-m2 Sync2111-m2 Firmware Sync2111-m3 Sync2111-m3 Firmware Sync221-m1 Sync221-m1 Firmware Sync241-m1 Sync241-m1 Firmware Sync241-m2 Sync241-m2 Firmware Sync241-m4 Sync241-m4 Firmware Sync261-m1 Sync261-m1 Firmware Sync3000-m1 Sync3000-m12 Sync3000-m12 Firmware Sync3000-m1 Firmware Sync3000-m2 Sync3000-m2 Firmware Sync3000-m3 Sync3000-m3 Firmware Sync3000-m4 Sync3000-m4 Firmware
cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published:

Updated: 2024-08-04T04:25:16.841Z

Reserved: 2021-12-06T00:00:00.000Z

Link: CVE-2021-44564

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2022-01-06T12:15:08.190

Modified: 2024-11-21T06:31:13.317

Link: CVE-2021-44564

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses