by Kastro
Paper/Archive/CVE-2021-27451

CVE-2021-27451

Mesa Labs AmegaView — Mesa Labs AmegaView improper authentication

EPSS 0.9%CVSS 9.8
critical.is priorityof 100
41
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 58.3.583 × 2011.7No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

Mesa Labs AmegaView Versions 3.0 and prior’s passcode is generated by an easily reversible algorithm, which may allow an attacker to gain access to the device.

Affected

ProductAffectedFixed inSource
AmegaViewunspecified – 3.0–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
icscert (CNA)7.3CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

References

refus-cert.cisa.gov/ics/advisories/icsa-21-147-03