PT-2021-13800 · Unknown · Gryphon Tower

Published 2021-12-09 · Updated 2021-12-13 · CVE-2021-20143

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Gryphon Tower routers (affected versions not specified)

Description: An unauthenticated command injection issue exists in the parameters of operation 48 in the controller server service. An unauthenticated remote attacker on the same network can execute commands as root on the device by sending a specially crafted malicious packet to the controller server service on port 9999, specifically the "controller server" service.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2021-20143

Affected Products

Gryphon Tower

References · 4

• 🔥 https://tenable.com/security/research/tra-2021-51 · Exploit
• https://osv.dev/vulnerability/CVE-2021-20143 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-20143 · Security Note
• https://t.me/cibsecurity/33684 · Telegram Post