CVE-2021-28912

7.2 highEPSS 1.2%

High (7.2) in bab-technologie eibport firmware. EPSS 1.2% chance of exploitation in the next 30 days.

BAB TECHNOLOGIE GmbH eibPort V3. Each device has its own unique hard coded and weak root SSH key passphrase known as 'eibPort string'. This is usable and the final part of an attack chain to gain SSH root access.

Severity

CVSS 3.1

7.2 high

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.2% chance of exploitation in the next 30 days; higher than 68% of CVEs (scores of 2026-10-31)
CWEs: CWE-521, CWE-798
Published: 2021-09-09
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

bab-technologie:eibport_firmware

References

https://psytester.github.io/CVE-2021-28912
https://psytester.github.io/CVE-2021-28912

Check your stack JSON