Medium severity5.9NVD Advisory· Published May 6, 2021· Updated Jun 17, 2026

CVE-2021-31245

Description

omr-admin.py in openmptcprouter-vps-admin 0.57.3 and earlier compares the user provided password with the original password in a length dependent manner, which allows remote attackers to guess the password via a timing attack.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

openmptcprouter-vps-admin/openmptcprouter-vps-admindescription
Openmptcprouter/openmptcprouter-vps-adminllm-create
Range: <=0.57.3

Patches

Vulnerability mechanics

References

github.com/Ysurac/openmptcprouter-vps-admin/commit/a01cbc8c3d3b8bb7720bf3ff234671b4c0e1859cnvdPatchThird Party Advisory
medium.com/d3crypt/timing-attack-on-openmptcprouter-vps-admin-authentication-cve-2021-31245-12dd92303e1nvdExploitPatchThird Party Advisory
www.openmptcprouter.comnvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.384
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000