Paper/Archive/CVE-2021-27440

CVE-2021-27440

icscert — The software contains a hard-coded password it uses for its own inbound authentication or for outbound communication to external componen…

EPSS 1%CVSS 9.8

critical.is priorityof 100

CVSS 9.8 (NVD)9.8 / 10 × 3029.4 Not in CISA KEV+300.0 EPSS percentile 72.5.725 × 2014.5 No public exploit+100.0 SSVC exploitation: unknown+100.0

Description · from the CVE record

The software contains a hard-coded password it uses for its own inbound authentication or for outbound communication to external components on the Reason DR60 (all firmware versions prior to 02A04.1).

Affected

ProductAffectedFixed inSource

Reason DR60All firmware versions prior to 02A04.1–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

refus-cert.cisa.gov/ics/advisories/icsa-21-082-03