Lucene search
TenableCVELIST:CVE-2021-20145HistoryDec 09, 2021 - 3:19 p.m.
CVE-2021-20145
2021-12-0915:19:24
tenable
www.cve.org
5
gryphon tower routers
openvpn
vulnerability
lan interfaces
attackers
vpn network
configuration changes
EPSS
0.003
Percentile
68.6%
Gryphon Tower routers contain an unprotected openvpn configuration file which can grant attackers access to the Gryphon homebound VPN network which exposes the LAN interfaces of other users’ devices connected to the same service. An attacker could leverage this to make configuration changes to, or otherwise attack victims’ devices as though they were on an adjacent network.
CNA Affected
[
{
"product": "Gryphon Tower router",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "<= 04.0004.12 (Current)"
}
]
}
]Related
cnvd
cnvd
Gryphon Tower licensing issue vulnerability
2021-12-12 00:00:00
prion
prion
Design/Logic Flaw
2021-12-09 16:15:00
cve
cve
CVE-2021-20145
2021-12-09 16:15:08
nvd
nvd
CVE-2021-20145
2021-12-09 16:15:08