PT-2021-16820 · Open5Gs · Open5Gs

·

CVE-2021-25863

·

Published

2021-01-26

·

Updated

2023-08-08

CVSS v3.1

8.8

High

VectorAV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Open5GS version 2.1.3
Description The issue concerns a default password for the admin account, which is set to 1423. The software listens on 0.0.0.0:3000.
Recommendations For Open5GS version 2.1.3, change the default admin password to a strong, unique password to prevent unauthorized access. Consider restricting access to the admin account until the password is changed.

Exploit

Fix

Improper Authentication

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2021-25863

Affected Products

Open5Gs