CVE-2021-47744
HIGHCypress Solutions CTM-200/CTM-ONE <1.3.6 - Code Injection
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2021-47744. PoCs published by LiquidWorm.
AI-analyzed exploit summary This exploit leverages hard-coded credentials (root:Chameleon) to establish an SSH connection to Cypress Solutions CTM-200/CTM-ONE devices, providing remote root access. It uses Paramiko to execute arbitrary commands on the target system.
Description
Cypress Solutions CTM-200/CTM-ONE 1.3.6 contains hard-coded credentials vulnerability in Linux distribution that exposes root access. Attackers can exploit the static 'Chameleon' password to gain remote root access via Telnet or SSH on affected devices.
Exploits (1)
This exploit leverages hard-coded credentials (root:Chameleon) to establish an SSH connection to Cypress Solutions CTM-200/CTM-ONE devices, providing remote root access. It uses Paramiko to execute arbitrary commands on the target system.
References (4)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N