CVE-2021-3833
Published: 07 October 2021
Summary
CVE-2021-3833 is a critical-severity Incorrect Comparison (CWE-697) vulnerability in Artica Integria Ims. Its CVSS base score is 9.8 (Critical).
Operationally, ranked in the top 29.8% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2021-27080
- 🇪🇸 INCIBE: www.incibe.es
Vulnerability details
Integria IMS login check uses a loose comparator ("==") to compare the MD5 hash of the password provided by the user and the MD5 hash stored in the database. An attacker with a specific formatted password could exploit this vulnerability…
more
in order to login in the system with different passwords.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.