CVE-2021-28914

BAB TECHNOLOGIE GmbH eibPort V3 prior version 3.9.1 allow the user to set a weak password because the strength is shown in configuration tool, but finally not enforced. This is usable and part of an attack chain to gain SSH root access.
References
Link Resource
https://psytester.github.io/CVE-2021-28914 Third Party Advisory
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:bab-technologie:eibport_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:bab-technologie:eibport:v3:*:*:*:*:*:*:*

History

No history.

Information

Published : 2021-09-09 19:15

Updated : 2024-02-28 18:48


NVD link : CVE-2021-28914

Mitre link : CVE-2021-28914

CVE.ORG link : CVE-2021-28914


JSON object : View

Products Affected

bab-technologie

  • eibport_firmware
  • eibport
CWE
CWE-521

Weak Password Requirements