BAB TECHNOLOGIE GmbH eibPort V3 prior version 3.9.1 allow...
Moderate severity
Unreviewed
Published
May 24, 2022
to the GitHub Advisory Database
•
Updated Jan 30, 2023
Description
Published by the National Vulnerability Database
Sep 9, 2021
Published to the GitHub Advisory Database
May 24, 2022
Last updated
Jan 30, 2023
BAB TECHNOLOGIE GmbH eibPort V3 prior version 3.9.1 allow the user to set a weak password because the strength is shown in configuration tool, but finally not enforced. This is usable and part of an attack chain to gain SSH root access.
References