CRITICAL🇵🇱 Wersja polska

CVE-2021-27734

CVSS 9.8v3.1pub. 2021-05-17upd. 2024-11-21

Hirschmann HiOS 07.1.01, 07.1.02, and 08.1.00 through 08.5.xx and HiSecOS 03.3.00 through 03.5.01 allow remote attackers to change the credentials of existing users.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Belden Hirschmann Hios

    OS
    Belden
    07.1.0107.1.0208.1.00 – 08.6.00 (excl.)

  • Belden Hisecos

    OS
    Belden
    03.3.00 – 03.5.01
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
Auth Bypass
CWE
References

Related vulnerabilities

CVE-2020-6994CRITICAL9.8PL ✓same product

Buffer overflow w Hirschmann HiOS i HiSecOS — zdalne wykonanie kodu

CVE-2019-12262CRITICAL9.8PL ✓same product

Wind River VxWorks — błąd logiczny w kliencie RARP (nieproszone odpowiedzi)

CVE-2019-12255CRITICAL9.8PL ✓same product

Buffer Overflow w stosie TCP VxWorks — integer underflow przez TCP Urgent Pointer

CVE-2019-12260CRITICAL9.8PL ✓same product

Buffer Overflow w stosie TCP systemu VxWorks — mylący Urgent Pointer przez opcję TCP AO

CVE-2019-12256CRITICAL9.8PL ✓same product

Buffer overflow w parsowaniu opcji IPv4 w Wind River VxWorks