PT-2021-13798 · Unknown · Gryphon Tower

Evan Grant + 1 · Published 2021-12-09 · Updated 2021-12-13 · CVE-2021-20141

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Gryphon Tower routers (affected versions not specified)

Description: An unauthenticated command injection issue exists in the parameters of operation 32 in the controller server service. An unauthenticated remote attacker on the same network can execute commands as root on the device by sending a specially crafted malicious packet to the controller server service on port 9999, specifically the "controller server" service.

Recommendations: As a temporary workaround, consider restricting access to the controller server service on port 9999 to minimize the risk of exploitation. Avoid using the vulnerable operation 32 in the controller server service until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2021-20141

Affected Products

Gryphon Tower

References · 4

• 🔥 https://tenable.com/security/research/tra-2021-51 · Exploit
• https://osv.dev/vulnerability/CVE-2021-20141 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-20141 · Security Note
• https://t.me/cibsecurity/33701 · Telegram Post