Gryphon Tower Firmware
CVE-2021-20146
CRITICAL
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Lifecycle Timeline
1DescriptionNVD
An unprotected ssh private key exists on the Gryphon devices which could be used to achieve root access to a server affiliated with Gryphon's development and infrastructure. At the time of discovery, the ssh key could be used to login to the development server hosted in Amazon Web Services.
AnalysisAI
An unprotected ssh private key exists on the Gryphon devices which could be used to achieve root access to a server affiliated with Gryphon's development and infrastructure. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Technical ContextAI
This vulnerability is classified as Insufficiently Protected Credentials (CWE-522), which allows attackers to obtain user credentials due to weak protection mechanisms. An unprotected ssh private key exists on the Gryphon devices which could be used to achieve root access to a server affiliated with Gryphon's development and infrastructure. At the time of discovery, the ssh key could be used to login to the development server hosted in Amazon Web Services. Affected products include: Gryphonconnect Gryphon Tower Firmware.
RemediationAI
No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Hash passwords with strong algorithms (bcrypt, argon2), encrypt credentials in transit and at rest, never log credentials.
More in Gryphon Tower Firmware
View allAn unauthenticated command injection vulnerability exists in the parameters of operation 49 in the controller_server ser
An unauthenticated command injection vulnerability exists in the parameters of operation 48 in the controller_server ser
An unauthenticated command injection vulnerability exists in the parameters of operation 41 in the controller_server ser
An unauthenticated command injection vulnerability exists in the parameters of operation 32 in the controller_server ser
An unauthenticated command injection vulnerability exists in the parameters of operation 10 in the controller_server ser
An unauthenticated command injection vulnerability exists in the parameters of operation 3 in the controller_server serv
An unauthenticated command injection vulnerability exists in multiple parameters in the Gryphon Tower router’s web inter
Gryphon Tower routers contain an unprotected openvpn configuration file which can grant attackers access to the Gryphon
A reflected cross-site scripting vulnerability exists in the url parameter of the /cgi-bin/luci/site_access/ page on the
Same weakness CWE-522 – Insufficiently Protected Credentials
View allSame technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today