CVE-2021-32453CWE-306

SITEL CAP/PRX information exposure

Medium · published May 17, 2021

CVSS v3.1
6.5
EPSS
0%
Percentile
15.0
In the wild
Unconfirmed
What it is

SITEL CAP/PRX firmware version 5.2.01 allows an attacker with access to the local network, to access via HTTP to the internal configuration database of the device without any authentication. An attacker could exploit this vulnerability in order to obtain information about the device´s configuration.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00246 · 15.0th percentile
Weakness
CWE-306 · Missing Authentication for Critical Function
Published
2021-05-17T16:43Z
EPSS history
Timeline
  • 17 MAY 16:43Z
    SITEL CAP/PRX information exposure
    cvelistv5