1. Home
  2. CVE Database
  3. CVE-2021-28913
CRITICAL · 9.8

CVE-2021-28913

BAB TECHNOLOGIE GmbH eibPort V3 prior version 3.9.1 allow unauthenticated attackers access to /webif/SecurityModule to validate the so called and hard coded unique 'eibPort String' which acts as the r...

Vulnerability Description

BAB TECHNOLOGIE GmbH eibPort V3 prior version 3.9.1 allow unauthenticated attackers access to /webif/SecurityModule to validate the so called and hard coded unique 'eibPort String' which acts as the root SSH key passphrase. This is usable and part of an attack chain to gain SSH root access.

CVSS Score

9.8

CRITICAL

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
Bab-TechnologieEibport Firmware< 3.9.1
Bab-TechnologieEibportv3

Related Weaknesses (CWE)

CWE-306

References

FAQ

What is CVE-2021-28913?

CVE-2021-28913 is a vulnerability with a CVSS score of 9.8 (CRITICAL). BAB TECHNOLOGIE GmbH eibPort V3 prior version 3.9.1 allow unauthenticated attackers access to /webif/SecurityModule to validate the so called and hard coded unique 'eibPort String' which acts as the r...

How severe is CVE-2021-28913?

CVE-2021-28913 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.

Is there a patch for CVE-2021-28913?

Check the references section above for vendor advisories and patch information. Affected products include: Bab-Technologie Eibport Firmware, Bab-Technologie Eibport.