Approved changes feed: RSS · Atom

cpe:2.3:a:claroty:secure_remote_access_(sra)_site:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorClaroty (c1114d72-3610-5a9b-9408-9d6ef86f9240)
ProductSecure Remote Access (Sra) Site (9e44f0d6-f79b-5d0b-ae3e-215cc2b83e57)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-32958 vulnerable 2026-06-08 05:32:08.259173 Claroty Secure Remote Access Site - Authentication Bypass Using an Alternate Path or Channel
MEDIUM (5.5)
Successful exploitation of this vulnerability on Claroty Secure Remote Access (SRA) Site versions 3.0 through 3.2 allows an attacker with local command line interface access to gain the secret key, subsequently allowing them to generate valid session tokens for the web user interface (UI). With access to the web UI an attacker can access assets managed by the SRA installation and could compromise the installation.
Published: 2022-05-23T19:34:55.000Z
Updated: 2025-04-16T16:19:02.719Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.