CVE-2021-36306CWE-287

Networking OS10, versions prior to October 2021 with RESTCONF API enabled, contains an authentication bypass vulnerability

High · published November 20, 2021

CVSS v3.1
8.1
EPSS
4%
Percentile
89.7
In the wild
Unconfirmed
What it is

Networking OS10, versions prior to October 2021 with RESTCONF API enabled, contains an authentication bypass vulnerability. A remote unauthenticated attacker could exploit this vulnerability to gain access and perform actions on the affected system.

The record
Technical detail
CVSS v3.1
8.1 · HIGH
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.03690 · 89.7th percentile
Weakness
CWE-287 · Improper Authentication
Published
2021-11-20T01:40Z
EPSS history
Timeline
  • 20 NOV 01:40Z
    Networking OS10, versions prior to October 2021 with RESTCONF API enabled, contains an authentication bypass vulnerability
    cvelistv5