Unrated severityNVD Advisory· Published May 23, 2022· Updated Apr 16, 2025
Claroty Secure Remote Access Site - Authentication Bypass Using an Alternate Path or Channel
CVE-2021-32958
Description
Successful exploitation of this vulnerability on Claroty Secure Remote Access (SRA) Site versions 3.0 through 3.2 allows an attacker with local command line interface access to gain the secret key, subsequently allowing them to generate valid session tokens for the web user interface (UI). With access to the web UI an attacker can access assets managed by the SRA installation and could compromise the installation.
Affected products
2>=3.0, <=3.2+ 1 more
- (no CPE)range: >=3.0, <=3.2
- (no CPE)range: versions 3.0 through 3.2
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1- www.cisa.gov/uscert/ics/advisories/icsa-21-180-06mitrex_refsource_MISC
News mentions
0No linked articles in our index yet.