Bab-technologie

Records7All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical3CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

Bab-technologie records in CISA KEV

No Bab-technologie vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Eibport Firmware 7 records MEDIUM

Records

7 records

TI-2021-09862 CVE-2021-28913 · GHSA-xwhc-mqxq-rj7w

BAB TECHNOLOGIE GmbH eibPort V3 prior version 3.9.1 allow unauthenticated attackers…

MEDIUM 46

BAB TECHNOLOGIE GmbH eibPort V3 prior version 3.9.1 allow unauthenticated attackers access to /webif/SecurityModule to validate the so called and hard coded unique 'eibPort String' which acts as the root SSH key passphra…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01844 Published 2021-09-09 No fix listed CWE-306

TI-2021-09860 CVE-2021-28911 · GHSA-45rc-fw3m-7fq5

BAB TECHNOLOGIE GmbH eibPort V3 prior version 3.9.1 allow unauthenticated attackers…

MEDIUM 45

BAB TECHNOLOGIE GmbH eibPort V3 prior version 3.9.1 allow unauthenticated attackers access to /tmp path which contains some sensitive data (e.g.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01653 Published 2021-09-09 No fix listed CWE-307

TI-2021-09858 CVE-2021-28909 · GHSA-4pvv-c564-5hw3

BAB TECHNOLOGIE GmbH eibPort V3 prior version 3.9.1 allow unauthenticated attackers to…

MEDIUM 45

BAB TECHNOLOGIE GmbH eibPort V3 prior version 3.9.1 allow unauthenticated attackers to access uncontrolled the login service at /webif/SecurityModule in a brute force attack.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01391 Published 2021-09-09 No fix listed CWE-307

TI-2020-15054 CVE-2020-24573 · GHSA-f659-jgfp-vcm8

BAB TECHNOLOGIE GmbH eibPort V3 prior to 3.8.3 devices allow denial of service…

LOW 36

BAB TECHNOLOGIE GmbH eibPort V3 prior to 3.8.3 devices allow denial of service (Uncontrolled Resource Consumption) via requests to the lighttpd component.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01373 Published 2020-11-12 No fix listed CWE-400

TI-2021-09859 CVE-2021-28910 · GHSA-r3fq-9r25-fh69

BAB TECHNOLOGIE GmbH eibPort V3 prior version 3.9.1 contains basic SSRF vulnerability.

LOW 35

BAB TECHNOLOGIE GmbH eibPort V3 prior version 3.9.1 contains basic SSRF vulnerability.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01166 Published 2021-09-09 No fix listed CWE-918

TI-2021-09861 CVE-2021-28912 · GHSA-prp3-p73x-mqjc

BAB TECHNOLOGIE GmbH eibPort V3.

LOW 34

BAB TECHNOLOGIE GmbH eibPort V3.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01226 Published 2021-09-09 No fix listed CWE-521

TI-2021-09863 CVE-2021-28914 · GHSA-6p9j-f6xp-23r3

BAB TECHNOLOGIE GmbH eibPort V3 prior version 3.9.1 allow the user to set a weak password…

LOW 31

BAB TECHNOLOGIE GmbH eibPort V3 prior version 3.9.1 allow the user to set a weak password because the strength is shown in configuration tool, but finally not enforced.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01018 Published 2021-09-09 No fix listed CWE-521

Open these records in search →

Critical	3
High	3
Medium	1
Low	0
No CVSS	0