CVE-2021-20146

Critical

An unprotected ssh private key exists on the Gryphon devices which could be used to achieve root access to a server affiliated with…

tenable·CWE-522·Published 2021-12-09

CVSS

9.8

EPSS

0.02

KEV

Exploits

cve.orgen

291 chars

An unprotected ssh private key exists on the Gryphon devices which could be used to achieve root access to a server affiliated with Gryphon's development and infrastructure. At the time of discovery, the ssh key could be used to login to the development server hosted in Amazon Web Services.

NVDen

291 chars

NVDes

327 chars

Se presenta una clave privada ssh desprotegida en los dispositivos Gryphon que podría ser usada para conseguir acceso root a un servidor afiliado al desarrollo e infraestructura de Gryphon. En el momento de la detección, la clave ssh podría usarse para iniciar sesión en el servidor de desarrollo alojado en Amazon Web Services

Version	Type	Source	Base	Exp	Impact	Vector
2.0	Primary	NVD	10.0	10.0	10.0	AV:N/AC:L/Au:N/C:C/I:C/A:C
3.1	Primary	NVD	9.8	3.9	5.9	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVE-2021-20146

CVSS metrics across sources