What is CVE-2021-28913?

CVE-2021-28913 is a critical-severity vulnerability in Bab-Technologie Eibport, classified under Missing Authentication for Critical Function. CVSS score: 9.8/10. Published 2021-09-09.

How severe is CVE-2021-28913?

Critical severity. CVSS v3 base score is 9.8 out of 10.

Auth bypass in Bab-Technologie Eibport

CVE-2021-28913

BAB TECHNOLOGIE GmbH eibPort V3 prior version 3.9.1 allow unauthenticated attackers access to /webif/SecurityModule to validate the so called and hard coded unique 'eibPort String' which acts as the root SSH key passphrase. This is usable and part of an attack chain to gain SSH root access.

Vulnerability class: Broken Authentication

EPSS: 0.018 (76.8th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Bab-technologie Eibport — versions v3
Bab-technologie Eibport_firmware
N/a — versions n/a

Weakness classification (CWE)

CWE-306 — Missing Authentication for Critical Function

References

cve@mitre.org (Third Party Advisory, x_refsource_MISC)

Frequently asked questions

What is CVE-2021-28913?: CVE-2021-28913 is a critical-severity vulnerability in Bab-Technologie Eibport, classified under Missing Authentication for Critical Function. CVSS score: 9.8/10. Published 2021-09-09.
How severe is CVE-2021-28913?: Critical severity. CVSS v3 base score is 9.8 out of 10.