PT-2021-19705 · Sitel · Sitel Cap/Prx

Aarón Flecha Menéndez + 1 · Published 2021-05-17 · Updated 2023-11-09 · CVE-2021-32453

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions: SITEL CAP/PRX firmware version 5.2.01

Description: The issue allows an attacker with access to the local network to access the internal configuration database of the device via HTTP without any authentication. This could be exploited to obtain information about the device's configuration.

Recommendations: For SITEL CAP/PRX firmware version 5.2.01, consider restricting access to the device's internal configuration database until a patch is available. As a temporary workaround, limit access to the local network to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Missing Authentication

Weakness Enumeration

CWE-306

Related Identifiers

CVE-2021-32453

Affected Products

Sitel Cap/Prx

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2021-32453 · Security Note
• https://osv.dev/vulnerability/CVE-2021-32453 · Vendor Advisory
• https://incibe.es/en/incibe-cert/notices/aviso-sci/sitel-capprx-information-exposure · Note
• https://t.me/cvenotify/14944 · Telegram Post