CVE-2021-43575

KNX ETS6 through 6.0.0 uses the hard-coded password ETS5Password, with a salt value of Ivan Medvedev, allowing local users to read project information, a similar issue to CVE-2021-36799. NOTE: The vendor disputes this because it is not the responsibility of the ETS to securely store cryptographic key material when it is not being exported

CVSS v3.1

5.5 MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

CVSS v2.0

2.1 LOWAV:L/AC:L/Au:N/C:P/I:N/A:N

EPSS

0.31% chance of exploitation in the next 30 days, 24th percentile

Published

2021-11-09

Updated

2024-08-04

Proof-of-concept exploits (1)

• robertguetzkow/ets5-password-recovery33★ · 2022-07-23

References

• CVE Record
• NVD entry

Related

• CVE-2021-37740
• CVE-2021-43574
• CVE-2021-43579
• CVE-2021-43572
• CVE-2021-43609
• CVE-2021-43571