CVE-2021-37163

EPSS 0.58%
Veröffentlicht 02.08.2021 13:15:07
Zuletzt bearbeitet 21.11.2024 06:14:45
Quelle cve@mitre.org
CVE-Watchlists
Login
Unerledigt
Login

An insecure permissions issue was discovered in HMI3 Control Panel in Swisslog Healthcare Nexus operated by released versions of software before Nexus Software 7.2.5.7. The device has two user accounts with passwords that are hardcoded.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 7

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Swisslog-healthcare ≫ Hmi-3 Control Panel Firmware Version < 7.2.5.7

Swisslog-healthcare ≫ Hmi-3 Control Panel Version-

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.58%	0.679

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	9.8	3.9	5.9	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov	7.5	10	6.4	AV:N/AC:L/Au:N/C:P/I:P/A:P

CWE-798 Use of Hard-coded Credentials

The product contains hard-coded credentials, such as a password or cryptographic key.

https://www.armis.com/PwnedPiper

Third Party Advisory

https://www.swisslog-healthcare.com

Product

https://www.swisslog-healthcare.com/en-us/customer-care/security-information/cve-disclosures#:~:text=CVE%20Disclosures%20%20%20%20Vulnerability%20Name%20%2C%20%20CVE-2021-37164%20%204%20more%20rows%20

https://www.swisslog-healthcare.com/-/media/swisslog-healthcare/documents/customer-service/armis-documents/cve-2021-37163-bulletin---default-credentials-for-the-telnet-server.pdf?rev=da64c389a475494985b9fd2c2c508542&hash=466A7109AF08EBFF3756B2C25968ED5E

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2021-37163

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2021-37163

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2021-37163

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2021-37163