CVE-2021-33903 - CVE House
Back to Database
Status published High CVE-2021-33903

In LCOS 10.40 to 10.42.0473-RU3 with SNMPv3 enabled on LANCOM...

Vulnerability Description

In LCOS 10.40 to 10.42.0473-RU3 with SNMPv3 enabled on LANCOM devices, changing the password of the root user via the CLI does not change the password of the root user for SNMPv3 access. (However, changing the password of the root user via LANconfig does change the password of the root user for SNMPv3 access.)

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2021-33903

Credits & Attribution

No credits recorded in the NVD database.

References

More from lancom-systems

View All →
CVE-2021-31538
LANCOM R&S Unified Firewall (UF) devices running LCOS FX 10.5...
High 7.5
CVE-2020-23055
ANCOM WLAN Controller (Wireless Series & Hotspot) WLC-1000 & WLC-4006...
Medium 5.4

Affected Vendor

lancom-systems

View all reports →

Affected Software

lcos
Vulnerable Versions:
10.40, 10.42.0473

Timeline

Official Publish: October 7th, 2021
Last Modified: August 4th, 2024
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.