GCVE - cpe:2.3:o:bab-technologie:eibport_firmware:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:o:bab-technologie:eibport_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

Vendor	Bab Technologie (`405d0c20-224b-5fc5-b00e-e4bfdeb60c3d`)
Product	Eibport Firmware (`ed769ee3-dd6a-5a9e-99e9-e966d42d652b`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2021-28914`	vulnerable	2026-06-08 05:31:25.134221	Details available BAB TECHNOLOGIE GmbH eibPort V3 prior version 3.9.1 allow the user to set a weak password because the strength is shown in configuration tool, but finally not enforced. This is usable and part of an attack chain to gain SSH root access. Published: 2021-09-09T18:03:32.000Z Updated: 2024-08-03T21:55:12.271Z Open on db.gcve.eu Reference links https://psytester.github.io/CVE-2021-28914	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-28913`	vulnerable	2026-06-08 05:31:25.133823	Details available BAB TECHNOLOGIE GmbH eibPort V3 prior version 3.9.1 allow unauthenticated attackers access to /webif/SecurityModule to validate the so called and hard coded unique 'eibPort String' which acts as the root SSH key passphrase. This is usable and part of an attack chain to gain SSH root access. Published: 2021-09-09T18:00:27.000Z Updated: 2024-08-03T21:55:12.096Z Open on db.gcve.eu Reference links https://psytester.github.io/CVE-2021-28913	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-28912`	vulnerable	2026-06-08 05:31:25.133415	Details available BAB TECHNOLOGIE GmbH eibPort V3. Each device has its own unique hard coded and weak root SSH key passphrase known as 'eibPort string'. This is usable and the final part of an attack chain to gain SSH root access. Published: 2021-09-09T17:57:34.000Z Updated: 2024-08-03T21:55:11.874Z Open on db.gcve.eu Reference links https://psytester.github.io/CVE-2021-28912	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-28911`	vulnerable	2026-06-08 05:31:25.132993	Details available BAB TECHNOLOGIE GmbH eibPort V3 prior version 3.9.1 allow unauthenticated attackers access to /tmp path which contains some sensitive data (e.g. device serial number). Having those info, a possible loginId can be self-calculated in a brute force attack against BMX interface. This is usable and part of an attack chain to gain SSH root access. Published: 2021-09-09T17:45:39.000Z Updated: 2024-08-03T21:55:12.290Z Open on db.gcve.eu Reference links https://psytester.github.io/CVE-2021-28911	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-28910`	vulnerable	2026-06-08 05:31:25.132653	Details available BAB TECHNOLOGIE GmbH eibPort V3 prior version 3.9.1 contains basic SSRF vulnerability. It allow unauthenticated attackers to request to any internal and external server. Published: 2021-09-09T17:37:34.000Z Updated: 2024-08-03T21:55:12.241Z Open on db.gcve.eu Reference links https://psytester.github.io/CVE-2021-28910	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-28909`	vulnerable	2026-06-08 05:31:25.131317	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-24573`	vulnerable	2026-06-08 05:22:34.444342	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.