CVE-2021-28910
HIGHCVSS 7.5/10EPSS 1.13%
Last modified
CVE-2021-28910 is a high-severity vulnerability rated 7.5/10 on the CVSS scale. BAB TECHNOLOGIE GmbH eibPort V3 prior version 3.9.1 contains basic SSRF vulnerability. It allow unauthenticated attackers to request to any internal and external server.. EPSS estimates a 1.13% chance of exploitation in the next 30 days.
Description
BAB TECHNOLOGIE GmbH eibPort V3 prior version 3.9.1 contains basic SSRF vulnerability. It allow unauthenticated attackers to request to any internal and external server.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Bab-Technologie | Eibport Firmware | < 3.9.1 |
References
- https://psytester.github.io/CVE-2021-28910Third Party Advisory
- https://psytester.github.io/CVE-2021-28910Third Party Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2021-28910?
BAB TECHNOLOGIE GmbH eibPort V3 prior version 3.9.1 contains basic SSRF vulnerability. It allow unauthenticated attackers to request to any internal and external server.
How severe is CVE-2021-28910?
CVE-2021-28910 has a CVSS score of 7.5/10 (HIGH severity). The EPSS model estimates a 1.13% probability of exploitation in the next 30 days.
How do I fix CVE-2021-28910?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2021
- CVE-2021-28902In function read_yin_container() in libyang <= v1.0.225, it …7.5
- CVE-2021-28903A stack overflow in libyang <= v1.0.225 can cause a denial o…7.5
- CVE-2021-28904In function ext_get_plugin() in libyang <= v1.0.225, it does…7.5
- CVE-2021-28905In function lys_node_free() in libyang <= v1.0.225, it asser…7.5
- CVE-2021-28906In function read_yin_leaf() in libyang <= v1.0.225, it doesn…7.5
- CVE-2021-28909BAB TECHNOLOGIE GmbH eibPort V3 prior version 3.9.1 allow un…9.8
- CVE-2021-28911BAB TECHNOLOGIE GmbH eibPort V3 prior version 3.9.1 allow un…9.8
- CVE-2021-28912BAB TECHNOLOGIE GmbH eibPort V3. Each device has its own uni…7.2
- CVE-2021-28913BAB TECHNOLOGIE GmbH eibPort V3 prior version 3.9.1 allow un…9.8
- CVE-2021-28914BAB TECHNOLOGIE GmbH eibPort V3 prior version 3.9.1 allow th…6.5
- CVE-2021-28918Improper input validation of octal strings in netmask npm pa…9.1
- CVE-2021-28924Self Authenticated XSS in Nagios Network Analyzer before 2.4…6.1
Are you affected by CVE-2021-28910?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST