1. Home
  2. CVE Database
  3. CVE-2021-34600
MEDIUM · 5.5

CVE-2021-34600

Telenot CompasX versions prior to 32.0 use a weak seed for random number generation leading to predictable AES keys used in the NFC tags used for local authorization of users. This may lead to total l...

Vulnerability Description

Telenot CompasX versions prior to 32.0 use a weak seed for random number generation leading to predictable AES keys used in the NFC tags used for local authorization of users. This may lead to total loss of trustworthiness of the installation.

CVSS Score

5.5

MEDIUM

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
NONE
Availability
NONE

Affected Products

VendorProductVersions
TelenotCompasx< 32.0

Related Weaknesses (CWE)

CWE-335

References

FAQ

What is CVE-2021-34600?

CVE-2021-34600 is a vulnerability with a CVSS score of 5.5 (MEDIUM). Telenot CompasX versions prior to 32.0 use a weak seed for random number generation leading to predictable AES keys used in the NFC tags used for local authorization of users. This may lead to total l...

How severe is CVE-2021-34600?

CVE-2021-34600 has been rated MEDIUM with a CVSS base score of 5.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2021-34600?

Check the references section above for vendor advisories and patch information. Affected products include: Telenot Compasx.