CVE-2021-33895 Auth bypass in n/a
Attackers can bypass password authentication in ETINET Backbox by logging in with a specific process User ID, gaining unauthorized access.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2021-33895?
CVE-2021-33895 is a high-severity authentication bypass vulnerability in n/a, published on 25 Jun 2021. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
ETINET BACKBOX E4.09 and H4.09 mismanages password access control. When a user uses the User ID of the process running BBSV to login to the Backbox UI application, the system procedure (USER_AUTHENTICATE_) used for verifying the Password returns 0 (no error). The reason is that the user is not running the XYGate application. Hence, BBSV assumes the Password is correct. For H4.09, the affected version isT0954V04^AAO. For E4.09, the affected version is 22SEP2020. Note: If your current version is E4.10-16MAY2021 (version procedure T9999V04_16MAY2022_BPAKETI_10), a hotfix (FIXPAK-19OCT-2022) is available in version E4.10-19OCT2022. Resolution to CVE-2021-33895 in version E4.11-19OCT2022
Weakness: CWE-287
Which versions are affected by CVE-2021-33895?
It affects 2 products.
Products include Etinet Backbox E4.09 Firmware, Hpe Backbox H4.09 Firmware.
How do I fix CVE-2021-33895?
No fix has been published for CVE-2021-33895 yet. Limit exposure of the affected software until one is available.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2021-33895 being exploited?
There is no known exploitation of CVE-2021-33895 in the wild and no public exploit code.
Sources
Also known as GHSA-cvqr-93m2-6777.