What’s Vulnerable › Vulnerabilities

CVE-2021-33589

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2023-04-21 · updated 2026-06-17
• Weakness: CWE-522

Description

Ribose RNP before 0.15.1 does not implement a required step in a cryptographic algorithm, resulting in weaker encryption than on the tin of the algorithm.

Affected products

• Ribose RNP: before 0.15.1 — fixed in 0.15.1

How to fix

Upgrade to a fixed version: Ribose RNP 0.15.1. Check the vendor advisory for mitigations.

References

• https://open.ribose.com/advisories/ra-2021-05-30/#CVE-2021-33589
• https://www.ribose.com/feedback/security
• https://open.ribose.com/advisories/ra-2021-05-30/#CVE-2021-33589
• https://www.ribose.com/feedback/security

Get alerted when CVE-2021-33589 or the next vulnerability affects your stack