1. Home
  2. CVE Database
  3. CVE-2021-28912
HIGH · 7.2

CVE-2021-28912

BAB TECHNOLOGIE GmbH eibPort V3. Each device has its own unique hard coded and weak root SSH key passphrase known as 'eibPort string'. This is usable and the final part of an attack chain to gain SSH ...

Vulnerability Description

BAB TECHNOLOGIE GmbH eibPort V3. Each device has its own unique hard coded and weak root SSH key passphrase known as 'eibPort string'. This is usable and the final part of an attack chain to gain SSH root access.

CVSS Score

7.2

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
Bab-TechnologieEibport Firmware< 3.9.1
Bab-TechnologieEibportv3

Related Weaknesses (CWE)

CWE-521CWE-798

References

FAQ

What is CVE-2021-28912?

CVE-2021-28912 is a vulnerability with a CVSS score of 7.2 (HIGH). BAB TECHNOLOGIE GmbH eibPort V3. Each device has its own unique hard coded and weak root SSH key passphrase known as 'eibPort string'. This is usable and the final part of an attack chain to gain SSH ...

How severe is CVE-2021-28912?

CVE-2021-28912 has been rated HIGH with a CVSS base score of 7.2/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2021-28912?

Check the references section above for vendor advisories and patch information. Affected products include: Bab-Technologie Eibport Firmware, Bab-Technologie Eibport.