PT-2021-17458 · Mesa · Mesa Labs Amegaview

Stephen Yackey · Published 2021-12-21 · Updated 2022-01-04 · CVE-2021-27451

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Mesa Labs AmegaView versions 3.0 and prior

Description The issue concerns the generation of the passcode by an easily reversible algorithm, which may allow an attacker to gain access to the device.

Recommendations For Mesa Labs AmegaView versions 3.0 and prior, consider changing the passcode generation algorithm to a more secure one to prevent easy reversibility and potential unauthorized access. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2021-27451

Affected Products

Mesa Labs Amegaview

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2021-27451 · Security Note
• https://osv.dev/vulnerability/CVE-2021-27451 · Vendor Advisory
• https://t.me/cibsecurity/34445 · Telegram Post
• https://us-cert.cisa.gov/ics/advisories/icsa-21-147-03 · Note