CVE-2021-22667
published 2021-02-24CVE-2021-22667: BB-ESWGP506-2SFP-T versions 1.01.09 and prior is vulnerable due to the use of hard-coded credentials, which may allow an attacker to gain unauthorized access…
PriorityP262critical9.8CVSS 3.1
AVNACLPRNUINSUCHIHAH
EPSS
3.61%
88.1th percentile
BB-ESWGP506-2SFP-T versions 1.01.09 and prior is vulnerable due to the use of hard-coded credentials, which may allow an attacker to gain unauthorized access and permit the execution of arbitrary code on the BB-ESWGP506-2SFP-T (versions 1.01.01 and prior).
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| advantech | bb-eswgp506-2sfp-t_firmware | <= 1.01.09 | — |
| advantech | bb-eswgp506-2sfp-t_firmware | — | — |
Detection & IOCsextracted from sources · hover to see the quote
- →Target device is Advantech BB-ESWGP506-2SFP-T industrial ethernet switch running firmware versions 1.01.09 and prior; presence of hard-coded credentials enables unauthenticated remote access and arbitrary code execution ↗
- →Vulnerability is exploitable remotely with no authentication and low skill level required (CVSS v3 9.8, AV:N/AC:L/PR:N/UI:N); monitor for unexpected remote login attempts or command execution on BB-ESWGP506-2SFP-T devices ↗
- →CVSS vector confirms network-accessible attack surface with no privileges or user interaction required; use this to prioritize detection rules scoped to the device's management interface ↗
- ·No known public exploits specifically target this vulnerability at time of advisory publication ↗
- ·Advantech considers BB-ESWGP506-2SFP-T end-of-life with no patch available; affected firmware versions are 1.01.09 and prior (arbitrary code execution confirmed on versions 1.01.01 and prior) ↗
CVSS provenance
nvdv3.19.8CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvdv2.010.0CRITICALAV:N/AC:L/Au:N/C:C/I:C/A:C
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-8m2w-rpr3-g4wf: BB-ESWGP506-2SFP-T versions 1
ghsa_unreviewed·2022-05-24
CVE-2021-22667 [CRITICAL] CWE-798 GHSA-8m2w-rpr3-g4wf: BB-ESWGP506-2SFP-T versions 1
BB-ESWGP506-2SFP-T versions 1.01.09 and prior is vulnerable due to the use of hard-coded credentials, which may allow an attacker to gain unauthorized access and permit the execution of arbitrary code on the BB-ESWGP506-2SFP-T (versions 1.01.01 and prior).
CISA ICS
Advantech BB-ESWGP506-2SFP-T
cisa_ics·2021-02-23·CVSS 9.8
[CRITICAL] Advantech BB-ESWGP506-2SFP-T
## Archived Content In an effort to keep CISA.gov current, the archive contains outdated information that may not reflect current policy or programs.
ICS Advisory
##
Advantech BB-ESWGP506-2SFP-T
Last RevisedFebruary 23, 2021
Alert CodeICSA-21-054-02
## 1. EXECUTIVE SUMMARY
- CVSS v3 9.8
- ATTENTION: Exploitable remotely/low skill level to exploit
- Vendor: Advantech
- Equipment: BB-ESWGP506-2SFP-T
- Vulnerability: Use of Hard-coded Credentials
## 2. RISK EVALUATION
Successful exploitation of this vulnerability could allow an attacker to gain unauthorized access to sensitive information and execute arbitrary code.
## 3. TECHNICAL DETAILS
## 3.1 AFFECTED PRODUCTS
The following Advantech products are affected:
- BB-ESWGP506-2SFP-T ind
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2021-02-24
Published