CVE-2021-27514 Auth bypass in n/a
Attackers can brute-force short session IDs to bypass authentication in EyesOfNetwork, potentially gaining unauthorized access to the system.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2021-27514?
CVE-2021-27514 is a critical authentication bypass vulnerability in n/a, published on 21 Feb 2021. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
EyesOfNetwork 5.3-10 uses an integer of between 8 and 10 digits for the session ID, which might be leveraged for brute-force authentication bypass (such as in CVE-2021-27513 exploitation).
Weakness: CWE-307
Which versions are affected by CVE-2021-27514?
It affects 1 product.
Products include Eyesofnetwork Eyesofnetwork.
How do I fix CVE-2021-27514?
No fix has been published for CVE-2021-27514 yet. Limit exposure of the affected software until one is available.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2021-27514 being exploited?
There is no known exploitation of CVE-2021-27514 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as GHSA-v598-3w4j-2787.