2021-09-09 17:35:00
mitre
PUBLISHED
BAB TECHNOLOGIE GmbH eibPort V3 prior version 3.9.1 allow unauthenticated attackers to access uncontrolled the login service at /webif/SecurityModule in a brute force attack. The password could be weak and default username is known as admin. This is usable and part of an attack chain to gain SSH root access.