PT-2021-17397 · Yeastar · Yeastar Neogate Tg400

Published 2021-02-19 · Updated 2021-03-09 · CVE-2021-27328

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Yeastar NeoGate TG400 version 91.3.0.3

Description The issue allows an authenticated user to perform Directory Traversal, which can lead to decrypting firmware and reading sensitive information, such as passwords or decryption keys.

Recommendations For Yeastar NeoGate TG400 version 91.3.0.3, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2021-27328

Affected Products

Yeastar Neogate Tg400

References · 9

• 🔥 https://github.com/SQSamir/CVE-2021-27328 · Exploit
• 🔥 http://packetstormsecurity.com/files/161560/Yeastar-TG400-GSM-Gateway-91.3.0.3-Path-Traversal.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2021-27328 · Security Note
• https://osv.dev/vulnerability/CVE-2021-27328 · Vendor Advisory
• http://yeastar.com · Vendor Advisory
• https://github.com/jimtangshfx/MilenageTest · Note
• https://t.me/cybersecuritytechnologies/2760 · Telegram Post
• https://t.me/cibsecurity/23884 · Telegram Post
• https://t.me/cvenotify/10177 · Telegram Post