CVE-2021-28910

EUVD-2021-15563
BAB TECHNOLOGIE GmbH eibPort V3 prior version 3.9.1 contains basic SSRF vulnerability. It allow unauthenticated attackers to request to any internal and external server.
SSRF
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.5 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 78%
Affected Products (NVD)
VendorProductVersion
bab-technologieeibport_firmware
𝑥
< 3.9.1
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://psytester.github.io/CVE-2021-28910
https://psytester.github.io/CVE-2021-28910