Vulnerability Details CVE-2021-28911
BAB TECHNOLOGIE GmbH eibPort V3 prior version 3.9.1 allow unauthenticated attackers access to /tmp path which contains some sensitive data (e.g. device serial number). Having those info, a possible loginId can be self-calculated in a brute force attack against BMX interface. This is usable and part of an attack chain to gain SSH root access.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.018
EPSS Ranking 81.7%
CVSS Severity
CVSS v3 Score 9.8
CVSS v2 Score 10.0
Products affected by CVE-2021-28911
-
cpe:2.3:h:bab-technologie:eibport:v3
-
cpe:2.3:o:bab-technologie:eibport_firmware:3.8.2
-
cpe:2.3:o:bab-technologie:eibport_firmware:3.8.3