Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2021-36799: KNX ETS5 through 5.7.6 uses the hard-coded password ETS5Password, with a salt value of Ivan Medvedev, allowing local users to read project information. NOTE: This vulnerability only affects product...

CVE-2021-36799 · published 5 years ago

Summary

KNX ETS5 through 5.7.6 uses the hard-coded password ETS5Password, with a salt value of Ivan Medvedev, allowing local users to read project information. NOTE: This vulnerability only affects products that are no longer supported by the maintainer

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software

Vendor	Product	Affected versions
knx	engineering_tool_software_5	<= 5.7.6 `cpe:2.3:a:knx:engineering_tool_software_5::::::::`

Original advisory text

References

http://packetstormsecurity.com/files/165200/ETS5-Password-Recovery-Tool.html Third Party Advisory VDB Entry
https://github.com/robertguetzkow/ets5-password-recovery Third Party Advisory
https://www.knx.org/knx-en/for-professionals/software/ets-5-professional/ Product Vendor Advisory

Fix within

Internet-facing 14 days

Internal At next upgrade

Not known to be exploited
Needs hands-on effort to exploit (estimated)
Gives an attacker full control (estimated)

Severity

8.8 High

Exploitation

<1% chance of attack within 30 days

Type

CWE-798Use of Hard-coded Credentials

Timeline

Published19 Jul 2021

Updated4 Nov 2026

First seen29 Sep 2026

Sources

CVE-2021-36799 · NVD

Track software like this

Free during beta