CVE-2021-43284: High severity govicture wr1200 firmware vulnerability
Published Nov 30, 2021
·Updated
An issue was discovered on Victure WR1200 devices through 1.0.3. The root SSH password never gets updated from its default value of admin. This enables an attacker to gain control of the device through SSH (regardless of whether the admin password was changed on the web interface).
Affected Software
4 affected components
Govicture Wr1200 Firmware<=1.0.3
Govicture Wr1200
All of the following
Govicture Wr1200 Firmware<=1.0.3
Govicture Wr1200
Event History
Nov 30, 2021
CVE Published
via MITRE·06:23 PM
Data Sourced
via MITRE·06:23 PM
Description
Data Sourced
via NVD·07:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2021-43284.
2
What is the severity of CVE-2021-43284?
The severity of CVE-2021-43284 is high.
3
How does CVE-2021-43284 affect Victure WR1200 devices?
CVE-2021-43284 allows an attacker to gain control of Victure WR1200 devices through SSH.
4
What is the root SSH password in Victure WR1200 devices affected by CVE-2021-43284?
The root SSH password on Victure WR1200 devices affected by CVE-2021-43284 is never updated from its default value of 'admin'.
5
How can I fix the vulnerability CVE-2021-43284?
To fix the vulnerability CVE-2021-43284, it is recommended to update the firmware of Victure WR1200 devices to a version that addresses this issue.