VULNERABILITY INTELLIGENCE

CVE-2021-34600

CVSS score5.5 MEDIUM
EPSS probability0.41%
CISA KEVNot currently listed
Published2022-01-20
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Description

Telenot CompasX versions prior to 32.0 use a weak seed for random number generation leading to predictable AES keys used in the NFC tags used for local authorization of users. This may lead to total loss of trustworthiness of the installation.

Weakness classification

  • info@cert.vde.com: CWE-335
  • nvd@nist.gov: CWE-335

Primary references