Embedded Credential Vulnerability in Allegro Windows Software by Allegro
CVE-2021-43978

8.1HIGH

Key Information:

Vendor

Allegro

Status
Allegro
Vendor
CVE Published:
8 December 2021

What is CVE-2021-43978?

The Allegro Windows software v3.3.4152.0 contains a vulnerability where administrator database credentials are hardcoded within its binary files. This flaw enables unauthorized users to easily access and manipulate sensitive data using these embedded credentials, potentially leading to significant security breaches. Immediate remediation is advised to prevent exploitation.

References

https://www.allegro.be/
https://excellium-services.com/cert-xlm-advisory/CVE-2021...
https://cds.thalesgroup.com/en/tcs-cert/CVE-2021-43978

CVSS V3.1

Score:
8.1
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.