Auth bypass in Sitel Cap/prx
CVE-2021-32453
SITEL CAP/PRX firmware version 5.2.01 allows an attacker with access to the local network, to access via HTTP to the internal configuration database of the device without any authentication. An attacker could exploit this vulnerability in order to obtain information about the device´s configuration.
Vulnerability class: Broken Authentication
EPSS: 0.002 (16.1th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N.
Affected products
- Sitel Cap/prx — versions 5.2.01
- Sitel-sa Cap\/prx
- Sitel-sa Cap\/prx_firmware — versions 5.2.01
Weakness classification (CWE)
References
- cve-coordination@incibe.es (x_refsource_CONFIRM)
Frequently asked questions
- What is CVE-2021-32453?
- CVE-2021-32453 is a medium-severity vulnerability in Sitel Cap/prx, classified under Missing Authentication for Critical Function. CVSS score: 6.5/10. Published 2021-05-17.
- How severe is CVE-2021-32453?
- Medium severity. CVSS v3 base score is 6.5 out of 10.