Auth bypass in Gryphonconnect Gryphon Tower
CVE-2021-20145
Gryphon Tower routers contain an unprotected openvpn configuration file which can grant attackers access to the Gryphon homebound VPN network which exposes the LAN interfaces of other users' devices connected to the same service. An attacker could leverage this to make configuration changes to, or otherwise attack victims' devices as though they were on an adjacent network.
Vulnerability class: Broken Authentication
EPSS: 0.012 (66.1th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N.
Affected products
- Gryphonconnect Gryphon_tower
- Gryphonconnect Gryphon_tower_firmware
- N/a Gryphon Tower Router — versions <= 04.0004.12 (Current)
Weakness classification (CWE)
Public proof-of-concept exploits
References
- vulnreport@tenable.com (Exploit, x_refsource_MISC, Vendor Advisory)
Frequently asked questions
- What is CVE-2021-20145?
- CVE-2021-20145 is a high-severity vulnerability in Gryphonconnect Gryphon Tower, classified under Improper Authentication. CVSS score: 7.5/10. Published 2021-12-09.
- How severe is CVE-2021-20145?
- High severity. CVSS v3 base score is 7.5 out of 10.
- Is CVE-2021-20145 known to be exploited?
- 2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.