Source |
CVE Liste |
Identifiant |
3931935 |
Date de publication |
2022-01-06 12:15:08 (vue: 2022-01-06 14:06:25) |
Titre |
CVE-2021-44564 |
Texte |
A security vulnerability originally reported in the SYNC2101 product, and applicable to specific sub-families of SYNC devices, allows an attacker to download the configuration file used in the device and apply a modified configuration file back to the device. The attack requires network access to the SYNC device and knowledge of its IP address. The attack exploits the unsecured communication channel used between the administration tool Easyconnect and the SYNC device (in the affected family of SYNC products). |
Envoyé |
Oui |
Condensat |
2021 44564 access address administration affected allows applicable apply attack attacker back between channel communication configuration cve device devices download easyconnect exploits families family file its knowledge modified network originally product products reported requires security specific sub sync sync2101 tool unsecured used vulnerability |
Tags |
Tool
Vulnerability
|
Stories |
|
Notes |
|
Move |
|