CVE-2021-39289
Summary
| CVE | CVE-2021-39289 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2021-08-23 05:15:00 UTC |
| Updated | 2023-11-02 15:45:00 UTC |
| Description | Certain NetModule devices have Insecure Password Handling (cleartext or reversible encryption), These models with firmware before 4.3.0.113, 4.4.0.111, and 4.5.0.105 are affected: NB800, NB1600, NB1601, NB1800, NB1810, NB2700, NB2710, NB2800, NB2810, NB3700, NB3701, NB3710, NB3711, NB3720, and NB3800. |
Risk And Classification
Problem Types: CWE-522
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Hardware | Netmodule | Nb1600 | - | All | All | All |
| Operating System | Netmodule | Nb1600 Firmware | All | All | All | All |
| Hardware | Netmodule | Nb1601 | - | All | All | All |
| Operating System | Netmodule | Nb1601 Firmware | All | All | All | All |
| Hardware | Netmodule | Nb1800 | - | All | All | All |
| Operating System | Netmodule | Nb1800 Firmware | All | All | All | All |
| Hardware | Netmodule | Nb1810 | - | All | All | All |
| Operating System | Netmodule | Nb1810 Firmware | All | All | All | All |
| Hardware | Netmodule | Nb2700 | - | All | All | All |
| Operating System | Netmodule | Nb2700 Firmware | All | All | All | All |
| Hardware | Netmodule | Nb2710 | - | All | All | All |
| Operating System | Netmodule | Nb2710 Firmware | All | All | All | All |
| Hardware | Netmodule | Nb2800 | - | All | All | All |
| Operating System | Netmodule | Nb2800 Firmware | All | All | All | All |
| Hardware | Netmodule | Nb2810 | - | All | All | All |
| Operating System | Netmodule | Nb2810 Firmware | All | All | All | All |
| Hardware | Netmodule | Nb3700 | - | All | All | All |
| Operating System | Netmodule | Nb3700 Firmware | All | All | All | All |
| Hardware | Netmodule | Nb3701 | - | All | All | All |
| Operating System | Netmodule | Nb3701 Firmware | All | All | All | All |
| Hardware | Netmodule | Nb3710 | - | All | All | All |
| Operating System | Netmodule | Nb3710 Firmware | All | All | All | All |
| Hardware | Netmodule | Nb3711 | - | All | All | All |
| Operating System | Netmodule | Nb3711 Firmware | All | All | All | All |
| Hardware | Netmodule | Nb3720 | - | All | All | All |
| Operating System | Netmodule | Nb3720 Firmware | All | All | All | All |
| Hardware | Netmodule | Nb3800 | - | All | All | All |
| Operating System | Netmodule | Nb3800 Firmware | All | All | All | All |
| Hardware | Netmodule | Nb800 | - | All | All | All |
| Operating System | Netmodule | Nb800 Firmware | All | All | All | All |
| Application | Netmodule | Netmodule Router Software | All | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| NetModule | Robust Communication | MISC | www.netmodule.com | |
| Full Disclosure: SEC Consult SA-20210820-0 :: Multiple Vulnerabilities in NetModule Router Software | CONFIRM | seclists.org | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.