CRITICAL🇬🇧 English

CVE-2021-40422

CVSS 10.0v3.1pub. 2022-04-14upd. 2024-11-21

An authentication bypass vulnerability exists in the device password generation functionality of Swift Sensors Gateway SG3-1010. A specially-crafted network request can lead to remote code execution. An attacker can send a sequence of requests to trigger this vulnerability.

oryginał EN
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

  • Swiftsensors Sg3 1010

    HW
    Swiftsensors
    wszystkie wersje

  • Swiftsensors Sg3 1010 Firmware

    OS
    Swiftsensors
    wszystkie wersje
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
Tagi
RCEAuth Bypass
CWE
Referencje