CVE-2021-31245

MEDIUM 5.9CVE-2021-31245 · Published 06/05/2021 · updated 17/06/2026

In short

CVE-2021-31245 is a MEDIUM (CVSS 5.9) vulnerability affecting openmptcprouter (openmptcprouter).
Chance of exploitation in the next 30 days (EPSS): 2.1%, higher than 81.6% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
openmptcprouter openmptcprouter	`≤ 0.57.3`	No fix yet

Description

omr-admin.py in openmptcprouter-vps-admin 0.57.3 and earlier compares the user provided password with the original password in a length dependent manner, which allows remote attackers to guess the password via a timing attack.

References

Ysurac/openmptcprouter-vps-admin · Third Party Advisory
Ysurac/openmptcprouter-vps-admin commit a01cbc8 · Patch
medium.com/d3crypt/timing-attack-on-openmptcprouter-vps-admin-authentication-cve-2021-31245-12dd92303e1 · Exploit
openmptcprouter.com · Vendor Advisory

More vulnerabilities in openmptcprouter

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free