Hardcoded credentials

BAB TECHNOLOGIE GmbH eibPort V3. Each device has its own unique hard coded and weak root SSH key passphrase known as 'eibPort string'. This is usable and the final part of an attack chain to gain SSH root access...

CVE-2021-28912

BAB TECHNOLOGIE GmbH eibPort V3. Each device has its own unique hard coded and weak root SSH key passphrase known as 'eibPort string'. This is usable and the final part of an attack chain to gain SSH root access...

CVE-2021-28914

CVE-2021-28914 affects BAB TECHNOLOGIE GmbH eibPort V3, prior to version 3.9.1. The root cause is a password strength setting shown in the configuration tool but not enforced, allowing users to set a weak password. This weakness is described as usable and part of an attack chain to gain SSH root ...

CVE-2021-28914

BAB TECHNOLOGIE GmbH eibPort V3 prior version 3.9.1 allow the user to set a weak password because the strength is shown in configuration tool, but finally not enforced. This is usable and part of an attack chain to gain SSH root access...

CVE-2021-28913

CVE-2021-28913 affects BAB TECHNOLOGIE GmbH eibPort V3 (prior to 3.9.1). The issue is unauthenticated access to the web interface (/webif/SecurityModule) that validates a hard-coded unique ‘eibPort String’ which acts as the root SSH key passphrase. This design flaw enables an attacker to gain SSH...

CVE-2021-28913

BAB TECHNOLOGIE GmbH eibPort V3 prior version 3.9.1 allow unauthenticated attackers access to /webif/SecurityModule to validate the so called and hard coded unique 'eibPort String' which acts as the root SSH key passphrase. This is usable and part of an attack chain to gain SSH root access...

CVE-2021-28912

BAB TECHNOLOGIE GmbH eibPort V3. Each device has its own unique hard coded and weak root SSH key passphrase known as 'eibPort string'. This is usable and the final part of an attack chain to gain SSH root access...

CVE-2021-28912

BAB TECHNOLOGIE GmbH eibPort V3 is affected. The issue stems from hard coded and weak root SSH key passphrases ('eibPort string'), with versions prior to 3.91 vulnerable to gaining root SSH access. The weakness enables an attacker to exploit a weak credential to obtain root access on affected dev...

CVE-2021-28911

BAB TECHNOLOGIE GmbH eibPort V3 prior version 3.9.1 allow unauthenticated attackers access to /tmp path which contains some sensitive data e.g. device serial number. Having those info, a possible loginId can be self-calculated in a brute force attack against BMX interface. This is usable and part...

CVE-2021-28911

CVE-2021-28911 concerns BAB TECHNOLOGIE GmbH eibPort V3 prior to 3.9.1. The vulnerability allows unauthenticated access to the /tmp directory that may contain sensitive data such as the device serial number. With that information, a loginId can be brute-forced against the BMX interface, forming a...

CVE-2021-28910

BAB TECHNOLOGIE GmbH eibPort V3 prior version 3.9.1 contains basic SSRF vulnerability. It allow unauthenticated attackers to request to any internal and external server...

CVE-2021-28910

BAB TECHNOLOGIE GmbH eibPort V3 (prior to 3.9.1) is affected by an SSRF vulnerability that allows unauthenticated attackers to issue requests to internal and external servers. The issue is documented across multiple sources (NVD/Red Hat/CVE listing) with a consistent description of the affected v...

CVE-2021-28909

The connected records confirm that BAB TECHNOLOGIE GmbH eibPort V3 prior versions (≤3.9.1) are affected by an unauthenticated brute-force exposure of the login service at /webif/SecurityModule. An attacker could leverage weak/default credentials (admin) to gain access and, per Red Hat/NVD referen...

CVE-2021-28909

BAB TECHNOLOGIE GmbH eibPort V3 prior version 3.9.1 allow unauthenticated attackers to access uncontrolled the login service at /webif/SecurityModule in a brute force attack. The password could be weak and default username is known as 'admin'. This is usable and part of an attack chain to gain SS...

Bab Technologie Gmbh BAB TECHNOLOGIE GmbH eibPort 代码问题漏洞

Bab Technologie Gmbh BAB TECHNOLOGIE GmbH eibPort is an application for managing smart furniture devices from BAB TECHNOLOGIE GmbH Bab Technologie Gmbh, Germany. A security vulnerability exists in BAB TECHNOLOGIE GmbH eibPort V3, which stems from an SSRF vulnerability in versions prior to 3.9.1. ...

BAB TECHNOLOGIE GmbH eibPort 安全漏洞

Bab Technologie Gmbh BAB TECHNOLOGIE GmbH eibPort is an application from BAB TECHNOLOGIE GmbH Bab Technologie Gmbh, Germany, for managing smart furniture devices. A security vulnerability exists in BAB TECHNOLOGIE GmbH eibPort V3, which stems from a vulnerability in versions prior to 3.9.1 that...

Bab Technologie Gmbh BAB TECHNOLOGIE GmbH eibPort 安全漏洞

Bab Technologie Gmbh BAB TECHNOLOGIE GmbH eibPort is an application from BAB TECHNOLOGIE GmbH Bab Technologie Gmbh, Germany, for managing smart furniture devices. A security vulnerability exists in versions prior to BAB TECHNOLOGIE GmbH eibPort V3, which stems from the strength of the password...

BAB TECHNOLOGIE GmbH eibPort 安全漏洞

Bab Technologie Gmbh BAB TECHNOLOGIE GmbH eibPort is an application from BAB TECHNOLOGIE GmbH Bab Technologie Gmbh, Germany, for managing smart furniture devices. A security vulnerability exists in BAB TECHNOLOGIE GmbH eibPort V3, which stems from a weak password in versions prior to 3.91. An...

BAB TECHNOLOGIE GmbH eibPort 访问控制错误漏洞

Bab Technologie Gmbh BAB TECHNOLOGIE GmbH eibPort is an application from BAB TECHNOLOGIE GmbH Bab Technologie Gmbh, Germany, for managing smart furniture devices. A security vulnerability exists in BAB TECHNOLOGIE GmbH eibPort V3, which stems from a vulnerability in versions prior to 3.9.1 that...

Bab Technologie Gmbh BAB TECHNOLOGIE GmbH eibPort 安全漏洞

Bab Technologie Gmbh BAB TECHNOLOGIE GmbH eibPort is an application from BAB TECHNOLOGIE GmbH Bab Technologie Gmbh, Germany, for managing smart furniture devices. A security vulnerability exists in BAB TECHNOLOGIE GmbH eibPort V3, which stems from a vulnerability in versions prior to 3.9.1 that...