CVE-2021-44564

Common vulnerabilities & exposures (CVE)

CVE database CVE database blogpost Release & EoL database

Published at: - 06-01-2022 01:15

Last modified: - 14-01-2022 05:46

Total changes: - 2

Description

A security vulnerability originally reported in the SYNC2101 product, and applicable to specific sub-families of SYNC devices, allows an attacker to download the configuration file used in the device and apply a modified configuration file back to the device. The attack requires network access to the SYNC device and knowledge of its IP address. The attack exploits the unsecured communication channel used between the administration tool Easyconnect and the SYNC device (in the affected family of SYNC products).

Common Vulnerability Scoring System (CVSS)

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

High

Attack complexity

Network

Attack vector

High

Availability

High

Confidentiality

High

Integrity

None

Privileges required

Unchanged

Scope

None

User interaction

8.1

Base score

2.2

5.9

Exploitability score

Impact score

Verification logic

AND

vendor=kalkitech AND product=sync241-m1_firmware AND versionEndIncluding=4.15.3

vendor=kalkitech AND product=sync241-m1 AND version=-

AND

vendor=kalkitech AND product=sync241-m2_firmware AND versionEndIncluding=4.15.3

vendor=kalkitech AND product=sync241-m2 AND version=-

AND

vendor=kalkitech AND product=sync241-m4_firmware AND versionEndIncluding=4.15.3

vendor=kalkitech AND product=sync241-m4 AND version=-

AND

vendor=kalkitech AND product=sync261-m1_firmware AND versionEndIncluding=4.15.3

vendor=kalkitech AND product=sync261-m1 AND version=-

AND

vendor=kalkitech AND product=sync2000-m1_firmware AND versionEndIncluding=4.15.3

vendor=kalkitech AND product=sync2000-m1 AND version=-

AND

vendor=kalkitech AND product=sync2000-m2_firmware AND versionEndIncluding=4.15.3

vendor=kalkitech AND product=sync2000-m2 AND version=-

AND

vendor=kalkitech AND product=sync2000-m4_firmware AND versionEndIncluding=4.15.3

vendor=kalkitech AND product=sync2000-m4 AND version=-

AND

vendor=kalkitech AND product=sync2101-m1_firmware AND versionEndIncluding=4.15.3

vendor=kalkitech AND product=sync2101-m1 AND version=-

AND

vendor=kalkitech AND product=sync2101-m2_firmware AND versionEndIncluding=4.15.3

vendor=kalkitech AND product=sync2101-m2 AND version=-

AND

vendor=kalkitech AND product=sync2101-m6_firmware AND versionEndIncluding=4.15.3

vendor=kalkitech AND product=sync2101-m6 AND version=-

AND

vendor=kalkitech AND product=sync2101-m7_firmware AND versionEndIncluding=4.15.3

vendor=kalkitech AND product=sync2101-m7 AND version=-

AND

vendor=kalkitech AND product=sync2101-m8_firmware AND versionEndIncluding=4.15.3

vendor=kalkitech AND product=sync2101-m8 AND version=-

AND

vendor=kalkitech AND product=sync2111-m2_firmware AND versionEndIncluding=4.15.3

vendor=kalkitech AND product=sync2111-m2 AND version=-

AND

vendor=kalkitech AND product=sync2111-m3_firmware AND versionEndIncluding=4.15.3

vendor=kalkitech AND product=sync2111-m3 AND version=-

AND

vendor=kalkitech AND product=sync3000-m1_firmware AND versionEndIncluding=4.15.3

vendor=kalkitech AND product=sync3000-m1 AND version=-

AND

vendor=kalkitech AND product=sync3000-m2_firmware AND versionEndIncluding=4.15.3

vendor=kalkitech AND product=sync3000-m2 AND version=-

AND

vendor=kalkitech AND product=sync3000-m3_firmware AND versionEndIncluding=4.15.3

vendor=kalkitech AND product=sync3000-m3 AND version=-

AND

vendor=kalkitech AND product=sync3000-m4_firmware AND versionEndIncluding=4.15.3

vendor=kalkitech AND product=sync3000-m4 AND version=-

AND

vendor=kalkitech AND product=sync3000-m12_firmware AND versionEndIncluding=4.15.3

vendor=kalkitech AND product=sync3000-m12 AND version=-

AND

vendor=kalkitech AND product=sync221-m1_firmware AND versionEndIncluding=4.15.3

vendor=kalkitech AND product=sync221-m1 AND version=-

Reference

Keywords

CVE-2021-44564

Common vulnerabilities & exposures (CVE)

Description

Common Vulnerability Scoring System (CVSS)

Verification logic

Reference

NVD

CVE-2021-44564

CVE

Common vulnerabilities & exposures

CVSS

Common vulnerability scoring system

Security

Vulnerabilities

Exposures