CVE-2021-22667CWE-798

BB-ESWGP506-2SFP-T versions 1.01.09 and prior is vulnerable due to the use of hard-coded credentials, which may allow an attacker to gain unauthorized access…

published February 24, 2021

CVSS
—
EPSS
4%
Percentile
89.8
In the wild
Unconfirmed
What it is

⚠️ Hard-coded credentials are like leaving the door wide open for anyone to walk in! If you're using BB-ESWGP506-2SFP-T versions 1.01.09 and earlier, you might want to check who's been invited to your party. 🎉 Think of it like having a restaurant menu that lists the secret recipe for your most prized dish. Anyone with access can cook it up, and that recipe can be exploited to serve some pretty nasty surprises! An attacker could waltz in and execute arbitrary code on your device, giving them the keys to your kingdom! This could lead to unauthorized access, data manipulation, or even a complete takeover, making the situation absolutely devastating.

Put simply

Think of it like having a restaurant menu that lists the secret recipe for your most prized dish. Anyone with access can cook it up, and that recipe can be exploited to serve some pretty nasty surprises! The vulnerability arises from the use of hard-coded credentials in BB-ESWGP506-2SFP-T versions 1.01.09 and earlier, allowing attackers to bypass authentication and gain control over the device.

What to do

An attacker could waltz in and execute arbitrary code on your device, giving them the keys to your kingdom! This could lead to unauthorized access, data manipulation, or even a complete takeover, making the situation absolutely devastating. Update your BB-ESWGP506-2SFP-T device to the latest version immediately! Regularly audit your devices for hard-coded credentials and replace them with unique, secure passwords. 🛡️ You've got this! Stay vigilant and keep your systems safe! 💪✨

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03740 · 89.8th percentile
Weakness
CWE-798 · Use of Hard-coded Credentials
Published
2021-02-24T16:01Z
EPSS history
Timeline
  • 24 FEB 16:01Z
    BB-ESWGP506-2SFP-T versions 1.01.09 and prior is vulnerable due to the use of hard-coded credentials, which may allow an attacker to gain unauthorized access…
    cvelistv5