CVE-2021-32453
Summary
| CVE | CVE-2021-32453 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2021-05-17 17:15:00 UTC |
| Updated | 2023-11-09 16:15:00 UTC |
| Description | SITEL CAP/PRX firmware version 5.2.01 allows an attacker with access to the local network, to access via HTTP to the internal configuration database of the device without any authentication. An attacker could exploit this vulnerability in order to obtain information about the device´s configuration. |
Risk And Classification
Problem Types: CWE-306
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Hardware | Sitel-sa | Cap/prx | - | All | All | All |
| Operating System | Sitel-sa | Cap/prx Firmware | 5.2.01 | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| SITEL CAP/PRX information exposure | INCIBE-CERT | CONFIRM | www.incibe-cert.es | |
| SITEL CAP/PRX information exposure | INCIBE-CERT | INCIBE | www.incibe.es | ||
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
Vendor Comments And Credit
Discovery Credit
LEGACY: Industrial Cybersecurity team of S21sec, special mention to Aarón Flecha Menéndez and Luis Martín Liras, as an independent researcher.
There are currently no legacy QID mappings associated with this CVE.