Log in Start free

Vulnerability · Published May 23, 2022 · Assigned by icscert

CVE-2021-32958Claroty Secure Remote Access Site - Authentication Bypass Using an Alternate Path or Channel

Medium 5.5

In plain English

A medium-severity authentication bypass in Secure Remote Access (SRA) Site from Claroty. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 13% of all known vulnerabilities).

Severity (CVSS 3.1)5.5Medium
Exploit odds (30 days)0.2%top 86.7% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

Successful exploitation of this vulnerability on Claroty Secure Remote Access (SRA) Site versions 3.0 through 3.2 allows an attacker with local command line interface access to gain the secret key, subsequently allowing them to generate valid session tokens for the web user interface (UI). With access to the web UI an attacker can access assets managed by the SRA installation and could compromise the installation.

Affected products (as reported)

VendorProductVersions
Claroty Secure Remote Access (SRA) Site versions 3.0 through 3.2

Weakness: CWE-288 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

References