CVE-2021-28914

BAB TECHNOLOGIE GmbH eibPort V3 prior version 3.9.1 allow the user to set a weak password because the strength is shown in configuration tool, but finally not enforced. This is usable and part of an attack chain to gain SSH root access.
References
Link Resource
https://psytester.github.io/CVE-2021-28914 Third Party Advisory
https://psytester.github.io/CVE-2021-28914 Third Party Advisory
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:bab-technologie:eibport_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:bab-technologie:eibport:v3:*:*:*:*:*:*:*

History

21 Nov 2024, 06:00

Type Values Removed Values Added
References () https://psytester.github.io/CVE-2021-28914 - Third Party Advisory () https://psytester.github.io/CVE-2021-28914 - Third Party Advisory

Information

Published : 2021-09-09 19:15

Updated : 2024-11-21 06:00


NVD link : CVE-2021-28914

Mitre link : CVE-2021-28914

CVE.ORG link : CVE-2021-28914


JSON object : View

Products Affected

bab-technologie

  • eibport_firmware
  • eibport
CWE
CWE-521

Weak Password Requirements