What is CVE-2021-32958?

CVE-2021-32958 is a medium-severity vulnerability in Claroty Secure Remote Access, classified under Authentication Bypass Using an Alternate Path or Channel. CVSS score: 5.5/10. Published 2022-05-23.

How severe is CVE-2021-32958?

Medium severity. CVSS v3 base score is 5.5 out of 10.

Vulnerability in Claroty Secure Remote Access

CVE-2021-32958

Successful exploitation of this vulnerability on Claroty Secure Remote Access (SRA) Site versions 3.0 through 3.2 allows an attacker with local command line interface access to gain the secret key, subsequently allowing them to generate valid session tokens for the web user interface (UI). With access to the web UI an attacker can access assets managed by the SRA installation and could compromise the installation.

EPSS: 0.002 (12.2th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.5 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N.

Affected products

Claroty Secure_remote_access
Claroty Secure Remote Access (Sra) Site — versions versions 3.0 through 3.2

Weakness classification (CWE)

CWE-288 — Authentication Bypass Using an Alternate Path or Channel

References

ics-cert@hq.dhs.gov (US Government Resource, Third Party Advisory, x_refsource_MISC)

Frequently asked questions

What is CVE-2021-32958?: CVE-2021-32958 is a medium-severity vulnerability in Claroty Secure Remote Access, classified under Authentication Bypass Using an Alternate Path or Channel. CVSS score: 5.5/10. Published 2022-05-23.
How severe is CVE-2021-32958?: Medium severity. CVSS v3 base score is 5.5 out of 10.