What is the CVSS score of CVE-2021-36767?

CVE-2021-36767 has a CVSS 3.1 base score of 9.8 (Critical). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.7%.

Realport CVE-2021-36767

CRITICAL

Use of Password Hash With Insufficient Computational Effort (CWE-916)

2021-10-08 cve@mitre.org

Information Disclosure Realport Connectport Ts 8 16 Firmware Connectport Lts 8 16 32 Firmware Passport Integrated Console Server Firmware Cm Firmware Portserver Ts Firmware Portserver Ts Mei Firmware Portserver Ts Mei Hardened Firmware Portserver Ts M Mei Firmware 6350 Sr Firmware Portserver Ts P Mei Firmware Transport Wr11 Xt Firmware One Ia Firmware Wr31 Firmware Wr44 R Firmware Connect Es Firmware Wr21 Firmware One Iap Firmware One Iap Haz Firmware

9.8

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

9.8 CRITICAL

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

CVE Published

Oct 08, 2021 - 15:15 nvd

CRITICAL 9.8

DescriptionNVD

In Digi RealPort through 4.10.490, authentication relies on a challenge-response mechanism that gives access to the server password, making the protection ineffective. An attacker may send an unauthenticated request to the server. The server will reply with a weakly-hashed version of the server's access password. The attacker may then crack this hash offline in order to successfully login to the server.

AnalysisAI

In Digi RealPort through 4.10.490, authentication relies on a challenge-response mechanism that gives access to the server password, making the protection ineffective. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-916. In Digi RealPort through 4.10.490, authentication relies on a challenge-response mechanism that gives access to the server password, making the protection ineffective. An attacker may send an unauthenticated request to the server. The server will reply with a weakly-hashed version of the server's access password. The attacker may then crack this hash offline in order to successfully login to the server. Affected products include: Digi Realport, Digi Connectport Ts 8\/16 Firmware, Digi Connectport Lts 8\/16\/32 Firmware, Digi Passport Integrated Console Server Firmware, Digi Cm Firmware. Version information: through 4.10.490.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.