Lucene search
+L

CVE-2021-27437

🗓️ 07 May 2021 14:36:54Reported by icscertType 
cve
 cve
🔗 web.nvd.nist.gov📰️ 4 Media mentions👁 82 Views🌐 WEB

Product allows attackers to obtain sensitive information from WISE-PaaS dashboard due to hard-coded administrator credentials. No authentication required for exploitation in WISE-PaaS/RMM (versions prior to 9.0.1).

Related
Detection
Affected
Refs
Paths
Social
ReporterTitlePublishedViews
Family
attackerkb
attackerkb
CVE-2021-27437
7 May 202115:15
–attackerkb
cnnvd
CNNVD
Advantech WISE-PaaS/RMM Trust Management Vulnerabilities
4 May 202100:00
–cnnvd
cnvd
CNVD
Advantech WISE-PaaS/RMM Trust Management Issue Vulnerability
28 May 202100:00
–cnvd
cvelist
Cvelist
CVE-2021-27437
7 May 202114:36
–cvelist
euvd
EUVD
EUVD-2021-14191
7 Oct 202500:30
–euvd
ics
ICS
Advantech WISE-PaaS RMM
4 May 202100:00
–ics
nvd
NVD
CVE-2021-27437
7 May 202115:15
–nvd
osv_cve
osv_cve
CVE-2021-27437
7 May 202115:15
–osv_cve
prion
Prion
Hardcoded credentials
7 May 202115:15
–prion
ptsecurity
Positive Technologies
PT-2021-17450
7 May 202100:00
–ptsecurity
Rows per page
NVD
Node
[
  {
    "product": "WISE-PaaS/RMM",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "versions prior to 9.0.1"
      }
    ]
  }
]
ParameterPositionPathDescriptionCWE
grafana/api/...path/grafana/api/...Hard-coded administrator credentials allow unauthorized access to Grafana APIs on the WISE-PaaS dashboard.CWE-798

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation