[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fMHCF2hu1iPZ2ALzJWi8gTdUpxtExlixOR0ObbTNEGYI":3,"g5a-risk:CVE-2021-38412":135},{"success":4,"data":5,"meta":133},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":49,"epssPercentile":27,"epssTimeSeries":50,"severity":51,"affectedProducts":52,"affectedProductsCount":65,"references":66,"referencesCount":73,"weaknesses":74,"weaknessesCount":88,"isActivelyExploited":89,"cisaInfo":27,"otxData":27,"relatedBlogPosts":90,"seoMetadata":91,"configurations":116,"relatedVendorCves":131,"notableEvents":132},"CVE-2021-38412","What is CVE-2021-38412?","Properly formatted POST requests to multiple resources on the HTTP and HTTPS web servers of the Digi PortServer TS 16 Rack device do not require authentication or authentication tokens. This vulnerability could allow an attacker to enable the SNMP service and manipulate the community strings to achieve further control in.","Properly formatted POST requests to multiple resources on the HTTP and HTTPS web servers of the Digi PortServer TS 16 Rack device do not require authenticati...","2021-09-17T20:15:07.647","2022-10-27T12:59:17.667",9.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":27,"CVSSMetricV2":40,"CVSSMetricV40":27},[16,30],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":25,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH","CRITICAL",null,3.9,5.9,{"Source":31,"Type":32,"CVSSData":33,"ExploitabilityScore":38,"ImpactScore":39},"ics-cert@hq.dhs.gov","Secondary",{"Version":20,"VectorString":34,"AttackVector":35,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":36,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":22,"BaseScore":37,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":22,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"CVSS:3.1\u002FAV:A\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:C\u002FC:H\u002FI:H\u002FA:L","ADJACENT_NETWORK","CHANGED",9.6,2.8,6,[41],{"Source":17,"Type":18,"CVSSData":42,"BaseSeverity":25,"ExploitabilityScore":47,"ImpactScore":48,"ACInsufInfo":27,"ObtainAllPrivilege":27,"ObtainUserPrivilege":27,"ObtainOtherPrivilege":27,"UserInteractionRequired":27},{"Version":43,"VectorString":44,"AccessVector":21,"AccessComplexity":22,"Authentication":23,"ConfidentialityImpact":45,"IntegrityImpact":45,"AvailabilityImpact":45,"BaseScore":46,"BaseSeverity":27,"Exploitability":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"CollateralDamagePotential":27,"TargetDistribution":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"EnvironmentalScore":27},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:P\u002FI:P\u002FA:P","PARTIAL",7.5,10,6.4,0.01342,[49,49,49,49,49,49,49],"Critical",[53,58,61],{"vendor":54,"product":55,"version":56,"criteria":57,"vulnerable":4},"digi","portserver_ts_16_firmware","82000684","cpe:2.3:o:digi:portserver_ts_16_firmware:82000684:*:*:*:*:*:*:*",{"vendor":54,"product":55,"version":59,"criteria":60,"vulnerable":4},"82000685","cpe:2.3:o:digi:portserver_ts_16_firmware:82000685:*:*:*:*:*:*:*",{"vendor":54,"product":62,"version":63,"criteria":64,"vulnerable":4},"portserver_ts_16","-","cpe:2.3:h:digi:portserver_ts_16:-:*:*:*:*:*:*:*",3,[67],{"url":68,"source":69,"tags":70},"https:\u002F\u002Fus-cert.cisa.gov\u002Fics\u002Fadvisories\u002Ficsa-21-257-01","CISA",[71,72],"Third Party Advisory","US Government Resource",1,[75,83],{"id":76,"name":77,"description":78,"extendedDescription":79,"status":80,"abstraction":81,"structure":82},"CWE-306","Missing Authentication for Critical Function","The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.","","Draft","Base","Simple",{"id":84,"name":85,"description":86,"extendedDescription":79,"status":80,"abstraction":87,"structure":82},"CWE-287","Improper Authentication","When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.","Class",2,false,[],{"title":92,"metaDescription":93,"keywords":94,"canonicalUrl":95,"structuredData":96},"What is CVE-2021-38412? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2021-38412, a critical severity cyber security vulnerability from 2021. Properly formatted POST requests to multiple resources ...","CVE-2021-38412, CVE-2021-38412 vulnerability, CVE-2021-38412 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2021, CVSS score, exploit, patch, remediation, digi security, portserver_ts_16_firmware vulnerability, portserver_ts_16 vulnerability","\u002Fwhat-is\u002Fcve-2021-38412",{"@context":97,"@type":98,"headline":92,"description":93,"datePublished":10,"dateModified":11,"author":99,"publisher":103,"about":107,"mainEntityOfPage":111,"articleSection":114,"keywords":115},"https:\u002F\u002Fschema.org","TechArticle",{"@type":100,"name":101,"url":102},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":100,"name":101,"url":102,"logo":104},{"@type":105,"url":106},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":108,"name":6,"description":109,"additionalType":110},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":112,"@id":113},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2021-38412","Cybersecurity","CVE-2021-38412, CVE-2021-38412 vulnerability, CVE-2021-38412 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[117],{"Operator":118,"Negate":27,"Nodes":119},"AND",[120,127],{"Operator":121,"Negate":27,"CPEMatch":122},"OR",[123,125],{"Vulnerable":4,"Criteria":57,"MatchCriteriaID":124,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"9364B8B5-22CA-4B2E-B811-9ECE2D49D756",{"Vulnerable":4,"Criteria":60,"MatchCriteriaID":126,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"48A462EE-6DEC-4A0E-868A-73A9D5C3E82D",{"Operator":121,"Negate":27,"CPEMatch":128},[129],{"Vulnerable":27,"Criteria":64,"MatchCriteriaID":130,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"D8707063-DE98-4C0A-9A61-67C3E10B95AE",[],[],{"lastModified":11,"cacheTime":134,"version":43},1792356593107,{"score":136,"band":137,"action":138,"scoredAt":139},55,"Medium","Plan remediation","2026-10-16T06:52:05.577094+00:00"]