CVE-2021-36799

KNX ETS5 through 5.7.6 uses the hard-coded password ETS5Password, with a salt value of Ivan Medvedev, allowing local users to read project information. NOTE: This vulnerability only affects products that are no longer supported by the maintainer

• CWE-798

• http://packetstormsecurity.com/files/165200/ETS5-Password-Recovery-Tool.htmlThird Party Advisory, VDB Entry
• https://github.com/robertguetzkow/ets5-password-recoveryThird Party Advisory
• https://www.knx.org/knx-en/for-professionals/software/ets-5-professional/Product, Vendor Advisory
• http://packetstormsecurity.com/files/165200/ETS5-Password-Recovery-Tool.htmlThird Party Advisory, VDB Entry
• https://github.com/robertguetzkow/ets5-password-recoveryThird Party Advisory
• https://www.knx.org/knx-en/for-professionals/software/ets-5-professional/Product, Vendor Advisory

Published

Jul 19, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-36792The dated_news (aka Dated News) extension through 5.1.1 for …7.2
• CVE-2021-36793The routes (aka Extbase Yaml Routes) extension before 2.1.1 …7.5
• CVE-2021-36794In Siren Investigate before 11.1.4, when enabling the cluste…9.8
• CVE-2021-36795A permission issue in the Cohesity Linux agent may allow pri…7.8
• CVE-2021-36797In Victron Energy Venus OS through 2.72, root access is gran…6.8
• CVE-2021-36798A Denial-of-Service (DoS) vulnerability was discovered in Te…7.5
• CVE-2021-3680showdoc is vulnerable to Missing Cryptographic Step4.9
• CVE-2021-36800Akaunting version 2.1.12 and earlier suffers from a code inj…9.1
• CVE-2021-36801Akaunting version 2.1.12 and earlier suffers from an authent…8.1
• CVE-2021-36802Akaunting version 2.1.12 and earlier suffers from a denial-o…6.5
• CVE-2021-36803Akaunting version 2.1.12 and earlier suffers from a persiste…5.4
• CVE-2021-36804Akaunting version 2.1.12 and earlier suffers from a password…8.1