PT-2021-19786 · Ericsson · Oss-Rc+1

Alessandro Bosco + 2 · Published 2021-10-14 · Updated 2024-08-04 · CVE-2021-32571

Positive Technologies (AI Summary)

CVSS v3.1

4.9

Medium

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions OSS-RC versions 18B and older

Description The issue affects OSS-RC systems during data migration procedures, where files containing usernames and passwords are left undeleted in folders accessible by top privileged accounts only. This issue only affects products that are no longer supported by the maintainer. It is recommended that OSS-RC customers upgrade to Ericsson Network Manager, a new generation OSS system.

Recommendations For OSS-RC versions 18B and older, consider upgrading to Ericsson Network Manager to resolve the issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-459

Related Identifiers

CVE-2021-32571

Affected Products

Ericsson Network Manager

Oss-Rc

References · 5

• https://osv.dev/vulnerability/CVE-2021-32571 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-32571 · Security Note
• https://t.me/cvenotify/88868 · Telegram Post
• https://gruppotim.it/it/innovazione/servizi-digitali/cybersecurity/red-team.html · Note
• https://t.me/cibsecurity/30592 · Telegram Post