CVE-2021-36799

Опубликовано: 19 июл. 2021

Источник: nvd

CVSS3: 8.8

CVSS2: 2.1

EPSS Низкий

Описание

KNX ETS5 through 5.7.6 uses the hard-coded password ETS5Password, with a salt value of Ivan Medvedev, allowing local users to read project information. NOTE: This vulnerability only affects products that are no longer supported by the maintainer

Ссылки

http://packetstormsecurity.com/files/165200/ETS5-Password-Recovery-Tool.html
Third Party Advisory
VDB Entry
https://github.com/robertguetzkow/ets5-password-recovery
Third Party Advisory
https://www.knx.org/knx-en/for-professionals/software/ets-5-professional/
Product
Vendor Advisory
http://packetstormsecurity.com/files/165200/ETS5-Password-Recovery-Tool.html
Third Party Advisory
VDB Entry
https://github.com/robertguetzkow/ets5-password-recovery
Third Party Advisory
https://www.knx.org/knx-en/for-professionals/software/ets-5-professional/
Product
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:knx:engineering_tool_software_5:*:*:*:*:*:*:*:*

Версия до 5.7.6 (включая)

EPSS

Процентиль: 33%

0.00128

Низкий

8.8 High

CVSS3

2.1 Low

CVSS2

Дефекты

CWE-798

Связанные уязвимости

GHSA-jj35-9m2c-j64q