Read the docs
TI-2021-22361 Aliases CVE-2021-47744GHSA-v245-m4vw-4545

Cypress Solutions CTM-200/CTM-ONE 1.3.6 Hard-coded Credentials Remote Root

Priority HIGH 79CWE-798Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Attack requirements
None
Impact type
Security bypass
Confidentiality · integrity · availability
High · High · High
Fix status
No fix listed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-798.

Summary

Cypress Solutions CTM-200/CTM-ONE 1.3.6 contains hard-coded credentials vulnerability in Linux distribution that exposes root access. Attackers can exploit the static 'Chameleon' password to gain remote root access via Telnet or SSH on affected devices.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.00329 26th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by the CNA
Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
Poc
Automatable
Yes
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
CypressONE-—No fix listedCNA
  • ONE VendorCypress Affected - Fixed in — No fix listed CNA

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2021-47744
  2. 2026-10-03 Alias added: GHSA-v245-m4vw-4545

References

Exploit 1

Advisory 1

Other 1

  • TI-2023-25642 Cypress Solutions CTM-200 v2.7.1.5600 and below was discovered to contain an OS command… CVSS 3.1HIGH 7.5
  • TI-2021-22362 Cypress Solutions CTM-200 2.7.1 Root Remote OS Command Injection via Firmware Upgrade CVSS 4.0HIGH 8.6
  • TI-2019-10372 An issue was discovered in Cypress (formerly Broadcom) WICED Studio 6.2 CYW20735B1 and… CVSS 3.1HIGH 8.8
  • TI-2018-14069 Broadcom firmware before summer 2014 on Nexus 5 BCM4335C0 2012-12-11, Raspberry Pi 3… CVSS 3.0HIGH 8.8
  • TI-2019-13462 On the Cypress CYW20735 evaluation board, any data that exceeds 384 bytes is copied and… CVSS 3.1HIGH 7.8
  • TI-2020-09619 The Bluetooth Low Energy implementation in Cypress PSoC Creator BLE 4.2 component… CVSS 3.1HIGH 7.5
See all 13 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences