CVE-2021-40422

An authentication bypass vulnerability exists in the device password generation functionality of Swift Sensors Gateway SG3-1010. A specially-crafted network request can lead to remote code execution. An attacker can send a sequence of requests to trigger this vulnerability...

CVE-2021-40422

CVE-2021-40422 affects the Swift Sensors Gateway SG3-1010: authentication bypass in the device password generation mechanism can enable remote code execution via specially crafted network requests. Public sources (Talos) confirm a hard-coded credential vulnerability (CWE-798) and remote SSH acces...