VULNERABILITY INTELLIGENCE

CVE-2021-4161

CVSS score9.8 CRITICAL

EPSS probability0.70%

CISA KEVNot currently listed

Published2021-12-27

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

The affected products contain vulnerable firmware, which could allow an attacker to sniff the traffic and decrypt login credential details. This could give an attacker admin rights through the HTTP web server.

Weakness classification

CWE-319: Cleartext Transmission of Sensitive Information

Primary references

ics-cert@hq.dhs.gov — Third Party Advisory, US Government Resource
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, US Government Resource