CVE-2021-27328

Katalog CVE

CVSS 6.5 · Medium EPSS 6,4%

Kerentanan Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') pada yeastar neogate tg400 firmware. Skor CVSS 3.1 6.5 (Medium) menurut NVD.

Deskripsi (NVD)

Yeastar NeoGate TG400 91.3.0.3 devices are affected by Directory Traversal. An authenticated user can decrypt firmware and can read sensitive information, such as a password or decryption key.

Rincian

Terbit di NVD

19 Februari 2021

Terakhir diubah

9 Juli 2026

Status NVD

Modified

CVSS 3.1

6.5 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

EPSS (30 hari)

6,4% peluang dieksploitasi; lebih tinggi dari 93,5% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• http://packetstormsecurity.com/files/161560/Yeastar-TG400-GSM-Gateway-91.3.0.3-Path-Traversal.html exploit · advisory pihak ketiga · vdb entry
• https://github.com/SQSamir/CVE-2021-27328 exploit · advisory pihak ketiga