CVE-2021-28809

Name of the Vulnerable Software and Affected Versions HBS 3 versions prior to v3.0.210506 HBS 3 versions prior to v3.0.210507

Description An improper access control issue has been reported, affecting certain legacy versions of HBS 3. This issue allows attackers to compromise the security of the operating system. The vulnerability is related to insufficient authentication procedures on the RTSS server, which can be exploited by a remote attacker to elevate privileges using a specially crafted request on port 8899.

Recommendations For HBS 3 versions prior to v3.0.210506, update to HBS 3 v3.0.210506 or later. For HBS 3 versions prior to v3.0.210507, update to HBS 3 v3.0.210507 or later. As a temporary workaround, consider restricting access to port 8899 to minimize the risk of exploitation.