PT-2021-13803
CVE-2021-20146
·
Published
2021-12-09
·
Updated
2021-12-13
Description by
CVSS 2.0
10
CriticalMetricsAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions:
Gryphon devices (affected versions not specified)
Description:
An unprotected ssh private key exists on the Gryphon devices, which could be used to achieve root access to a server affiliated with Gryphon's development and infrastructure. The ssh key could be used to login to the development server hosted in Amazon Web Services.
Recommendations:
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾