CVE-2021-43394

moderate-risk
Published 2022-01-24

Unisys OS 2200 Messaging Integration Services (NTSI) 7R3B IC3 and IC4, 7R3C, and 7R3D has an Incorrect Implementation of an Authentication Algorithm. An LDAP password is not properly validated.

Do I need to act?

-
0.39% chance of exploitation
EPSS score — low exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
9
CVSS 9.8/10 Critical
NETWORK / LOW complexity

Affected Products (4)

Messaging Integration Services
Messaging Integration Services
Messaging Integration Services
Messaging Integration Services

Affected Vendors

Unisys

References (2)

Vendor Advisory https://public.support.unisys.com/common/public/vulnerability/NVD_Detail_Rpt.asp...
Vendor Advisory https://public.support.unisys.com/common/public/vulnerability/NVD_Detail_Rpt.asp...
43
/ 100
moderate-risk
Severity 32/34 · Critical
Exploitability 1/34 · Minimal
Exposure 10/34 · Low