CVE-2021-34600

MEDIUM 5.5CVE-2021-34600 · Published 20/01/2022 · updated 17/06/2026

In short

CVE-2021-34600 is a MEDIUM (CVSS 5.5) vulnerability affecting compasx (telenot).
Chance of exploitation in the next 30 days (EPSS): 0.41%, higher than 36.0% of all vulnerabilities.
Fix: update to 32.0 or later.

Package	Affected versions	Patched versions
compasx telenot	`< 32.0`	`32.0`

Description

Telenot CompasX versions prior to 32.0 use a weak seed for random number generation leading to predictable AES keys used in the NFC tags used for local authorization of users. This may lead to total loss of trustworthiness of the installation.

References

x41-dsec.de/lab/advisories/x41-2021-003-telenot-complex-insecure-keygen · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free