Lucene search

MitreCVE-2021-43284

HistoryNov 30, 2021 - 7:15 p.m.

CVE-2021-43284

2021-11-3019:15:09

CWE-798

mitre

web.nvd.nist.gov

cve-2021-43284

victure wr1200

ssh

security vulnerability

default password

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.9

Confidence

High

EPSS

0.001

Percentile

23.6%

JSON

An issue was discovered on Victure WR1200 devices through 1.0.3. The root SSH password never gets updated from its default value of admin. This enables an attacker to gain control of the device through SSH (regardless of whether the admin password was changed on the web interface).

Affected configurations

Nvd

Node

govicturewr1200_firmwareRange≤1.0.3

AND

govicturewr1200Match-

VendorProductVersionCPE
govicturewr1200_firmware*cpe:2.3:o:govicture:wr1200_firmware:*:*:*:*:*:*:*:*
govicturewr1200-cpe:2.3:h:govicture:wr1200:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
govicture	wr1200_firmware	*	cpe:2.3:o:govicture:wr1200_firmware::::::::
govicture	wr1200	-	cpe:2.3:h:govicture:wr1200:-:::::::*

References

research.nccgroup.com/2021/11/12/technical-advisory-multiple-vulnerabilities-in-victure-wr1200-wifi-router-cve-2021-43282-cve-2021-43283-cve-2021-43284/

www.nccgroup.trust/us/our-research/?research=Technical+advisories

Social References

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.9

Confidence

High

EPSS

0.001

Percentile

23.6%

JSON

Related for CVE-2021-43284