Lucene search
PRIOn knowledge basePRION:CVE-2021-41104HistorySep 28, 2021 - 4:15 p.m.
Default credentials
2021-09-2816:15:00
PRIOn knowledge base
www.prio-n.com
2
0.001 Low
EPSS
Percentile
36.9%
ESPHome is a system to control the ESP8266/ESP32. Anyone with web_server enabled and HTTP basic auth configured on version 2021.9.1 or older is vulnerable to an issue in which web_server allows over-the-air (OTA) updates without checking user defined basic auth username & password. This issue is patched in version 2021.9.2. As a workaround, one may disable or remove web_server.
| CPE | Name | Operator | Version |
|---|---|---|---|
| esphome_firmware | lt | 2021.9.2 |
Related
osv
osv
Basic auth bypass in esphome
2021-09-29 17:09:14
PYSEC-2021-351
2021-09-28 16:15:00
cvelist
cvelist
cve
cve
CVE-2021-41104
2021-09-28 16:15:08
nvd
nvd
CVE-2021-41104
2021-09-28 16:15:08
github
github
Basic auth bypass in esphome
2021-09-29 17:09:14