CVE-2021-27328
MediumCVSS 6.5Exploitation Probability (EPSS)
Very high risk93th percentile - higher than 93% of all known CVEs
Summary
Yeastar NeoGate TG400 devices running firmware version 91.3.0.3 are affected by a directory traversal vulnerability. An authenticated user can decrypt the firmware and read sensitive information, such as passwords or decryption keys.
Risk Assessment
The risk involves potential exposure of sensitive credentials and cryptographic keys, which could lead to full compromise of the device and the network.
Recommendation
Immediately update the firmware of Yeastar NeoGate TG400 devices to the latest available version that addresses this vulnerability.
Original NVD description (English source)
Yeastar NeoGate TG400 91.3.0.3 devices are affected by Directory Traversal. An authenticated user can decrypt firmware and can read sensitive information, such as a password or decryption key.