Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-6p9j-f6xp-23r3

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

BAB TECHNOLOGIE GmbH eibPort V3 prior version 3.9.1 allow the user to set a weak password because the strength is shown in configuration tool, but finally not enforced. This is usable and part of an attack chain to gain SSH root access.

BAB TECHNOLOGIE GmbH eibPort V3 prior version 3.9.1 allow the user to set a weak password because the strength is shown in configuration tool, but finally not enforced. This is usable and part of an attack chain to gain SSH root access.

EPSS

Процентиль: 68%
0.00575
Низкий

Дефекты

CWE-521

Связанные уязвимости

CVSS3: 6.5
nvd
больше 4 лет назад

BAB TECHNOLOGIE GmbH eibPort V3 prior version 3.9.1 allow the user to set a weak password because the strength is shown in configuration tool, but finally not enforced. This is usable and part of an attack chain to gain SSH root access.

EPSS

Процентиль: 68%
0.00575
Низкий

Дефекты

CWE-521