PT-2021-14231 · Unknown · At-40Cm01Sr+1

Shinnosuke Tokusho · Published 2021-07-07 · Updated 2021-07-13 · CVE-2021-20776

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: SCT-40CM01SR (affected versions not specified) AT-40CM01SR (affected versions not specified)

Description: The issue is related to improper authentication, allowing an attacker to bypass access restrictions. This can lead to the execution of arbitrary commands via telnet.

Recommendations: For SCT-40CM01SR, restrict telnet access to prevent exploitation until a fix is available. For AT-40CM01SR, restrict telnet access to prevent exploitation until a fix is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2021-20776

Affected Products

At-40Cm01Sr

Sct-40Cm01Sr

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2021-20776 · Security Note
• https://t.me/cibsecurity/25951 · Telegram Post
• https://t.me/cvenotify/17186 · Telegram Post
• https://jvn.jp/en/jp/JVN21636825/index.html · Note
• https://t.me/cvenotify/17516 · Telegram Post