Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-xwhc-mqxq-rj7w

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

BAB TECHNOLOGIE GmbH eibPort V3 prior version 3.9.1 allow unauthenticated attackers access to /webif/SecurityModule to validate the so called and hard coded unique 'eibPort String' which acts as the root SSH key passphrase. This is usable and part of an attack chain to gain SSH root access.

BAB TECHNOLOGIE GmbH eibPort V3 prior version 3.9.1 allow unauthenticated attackers access to /webif/SecurityModule to validate the so called and hard coded unique 'eibPort String' which acts as the root SSH key passphrase. This is usable and part of an attack chain to gain SSH root access.

EPSS

Процентиль: 86%
0.02828
Низкий

Дефекты

CWE-306

Связанные уязвимости

CVSS3: 9.8
nvd
почти 4 года назад

BAB TECHNOLOGIE GmbH eibPort V3 prior version 3.9.1 allow unauthenticated attackers access to /webif/SecurityModule to validate the so called and hard coded unique 'eibPort String' which acts as the root SSH key passphrase. This is usable and part of an attack chain to gain SSH root access.

EPSS

Процентиль: 86%
0.02828
Низкий

Дефекты

CWE-306