Vulnerability Details CVE-2021-37471
Cradlepoint IBR900-600 devices running versions < 7.21.10 are vulnerable to a restricted shell escape sequence that provides an attacker the capability to simultaneously deny availability to the device's NetCloud Manager console, local console and SSH command-line.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 57.9%
CVSS Severity
CVSS v3 Score 7.5
CVSS v2 Score 7.8
References
Products affected by CVE-2021-37471
-
cpe:2.3:h:cradlepoint:ibr600:-
-
cpe:2.3:h:cradlepoint:ibr600c:-
-
cpe:2.3:h:cradlepoint:ibr900:-
-
cpe:2.3:o:cradlepoint:ibr600_firmware:*
-
cpe:2.3:o:cradlepoint:ibr600c_firmware:*
-
cpe:2.3:o:cradlepoint:ibr900_firmware:*