What’s Vulnerable › Vulnerabilities
CVE-2021-28912
- Severity: high (CVSS 7.2 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 1.2% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2021-09-09 · updated 2026-06-17
- Weakness: CWE-521
Description
BAB TECHNOLOGIE GmbH eibPort V3. Each device has its own unique hard coded and weak root SSH key passphrase known as 'eibPort string'. This is usable and the final part of an attack chain to gain SSH root access.
Affected products
- Bab-Technologie Eibport Firmware: before 3.9.1 — fixed in 3.9.1
How to fix
Upgrade to a fixed version: Bab-Technologie Eibport Firmware 3.9.1. Check the vendor advisory for mitigations.
References
Get alerted when CVE-2021-28912 or the next vulnerability affects your stack