CVE-2021-28914

EUVD-2021-15567
BAB TECHNOLOGIE GmbH eibPort V3 prior version 3.9.1 allow the user to set a weak password because the strength is shown in configuration tool, but finally not enforced. This is usable and part of an attack chain to gain SSH root access.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
6.5 MEDIUM
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 68%
Affected Products (NVD)
VendorProductVersion
bab-technologieeibport_firmware
𝑥
< 3.9.1
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://psytester.github.io/CVE-2021-28914
https://psytester.github.io/CVE-2021-28914