CVE-2021-27328

6.5 mediumEPSS 6.4%

Medium (6.5) in yeastar neogate tg400 firmware. EPSS 6.4% chance of exploitation in the next 30 days.

Yeastar NeoGate TG400 91.3.0.3 devices are affected by Directory Traversal. An authenticated user can decrypt firmware and can read sensitive information, such as a password or decryption key.

Severity

CVSS 3.1

6.5 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS: 6.4% chance of exploitation in the next 30 days; higher than 93% of CVEs (scores of 2026-10-31)
CWE: CWE-22
Published: 2021-02-19
Modified: 2026-07-09
Record from: the NVD, synced 2026-10-19

Affected

yeastar:neogate_tg400_firmware

References

http://packetstormsecurity.com/files/161560/Yeastar-TG400-GSM-Gateway-91.3.0.3-Path-Traversal.html
https://github.com/SQSamir/CVE-2021-27328
http://packetstormsecurity.com/files/161560/Yeastar-TG400-GSM-Gateway-91.3.0.3-Path-Traversal.html
https://github.com/SQSamir/CVE-2021-27328

Check your stack JSON