CVE-2021-29255

7.5 highEPSS 0.6%

High (7.5) in microseven mym71080i-b firmware. EPSS 0.6% chance of exploitation in the next 30 days.

MicroSeven MYM71080i-B 2.0.5 through 2.0.20 devices send admin credentials in cleartext to pnp.microseven.com TCP port 7007. An attacker on the same network as the device can capture these credentials.

Severity

CVSS 3.1

7.5 high

CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.6% chance of exploitation in the next 30 days; higher than 47% of CVEs (scores of 2026-10-31)
CWE: CWE-522
Published: 2021-03-26
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

microseven:mym71080i-b_firmware

References

https://blog.microseven.com
https://cybergladius.com/cve-2021-29255-vulnerability-disclosure/
https://blog.microseven.com
https://cybergladius.com/cve-2021-29255-vulnerability-disclosure/

Check your stack JSON