CVE-2021-44564

Published: Jan 6, 2022Modified: Jun 17, 2026

8.1

Vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 2.2 / Impact: 5.9

Source: NVD

Description

A security vulnerability originally reported in the SYNC2101 product, and applicable to specific sub-families of SYNC devices, allows an attacker to download the configuration file used in the device and apply a modified configuration file back to the device. The attack requires network access to the SYNC device and knowledge of its IP address. The attack exploits the unsecured communication channel used between the administration tool Easyconnect and the SYNC device (in the affected family of SYNC products).

Affected (20)

Products: Kalkitech: Sync241 M1 Firmware, Sync241 M2 Firmware, Sync241 M4 Firmware, Sync261 M1 Firmware, Sync2000 M1 Firmware, Sync2000 M2 Firmware, Sync2000 M4 Firmware, Sync2101 M1 Firmware, Sync2101 M2 Firmware, Sync2101 M6 Firmware, Sync2101 M7 Firmware, Sync2101 M8 Firmware, Sync2111 M2 Firmware, Sync2111 M3 Firmware, Sync3000 M1 Firmware, Sync3000 M2 Firmware, Sync3000 M3 Firmware, Sync3000 M4 Firmware, Sync3000 M12 Firmware, Sync221 M1 Firmware

20 products

Sync3000 M12 Firmware

Sync221 M1 Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Kalkitech Sync241 M1 Firmware	version ≤ 4.15.3

Running on/with	Platform Versions
Kalkitech Sync241 M1	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Kalkitech Sync241 M2 Firmware	version ≤ 4.15.3

Running on/with	Platform Versions
Kalkitech Sync241 M2	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Kalkitech Sync241 M4 Firmware	version ≤ 4.15.3

Running on/with	Platform Versions
Kalkitech Sync241 M4	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Kalkitech Sync261 M1 Firmware	version ≤ 4.15.3

Running on/with	Platform Versions
Kalkitech Sync261 M1	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Kalkitech Sync2000 M1 Firmware	version ≤ 4.15.3

Running on/with	Platform Versions
Kalkitech Sync2000 M1	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Kalkitech Sync2000 M2 Firmware	version ≤ 4.15.3

Running on/with	Platform Versions
Kalkitech Sync2000 M2	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Kalkitech Sync2000 M4 Firmware	version ≤ 4.15.3

Running on/with	Platform Versions
Kalkitech Sync2000 M4	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Kalkitech Sync2101 M1 Firmware	version ≤ 4.15.3

Running on/with	Platform Versions
Kalkitech Sync2101 M1	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Kalkitech Sync2101 M2 Firmware	version ≤ 4.15.3

Running on/with	Platform Versions
Kalkitech Sync2101 M2	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Kalkitech Sync2101 M6 Firmware	version ≤ 4.15.3

Running on/with	Platform Versions
Kalkitech Sync2101 M6	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Kalkitech Sync2101 M7 Firmware	version ≤ 4.15.3

Running on/with	Platform Versions
Kalkitech Sync2101 M7	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Kalkitech Sync2101 M8 Firmware	version ≤ 4.15.3

Running on/with	Platform Versions
Kalkitech Sync2101 M8	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Kalkitech Sync2111 M2 Firmware	version ≤ 4.15.3

Running on/with	Platform Versions
Kalkitech Sync2111 M2	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Kalkitech Sync2111 M3 Firmware	version ≤ 4.15.3

Running on/with	Platform Versions
Kalkitech Sync2111 M3	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Kalkitech Sync3000 M1 Firmware	version ≤ 4.15.3

Running on/with	Platform Versions
Kalkitech Sync3000 M1	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Kalkitech Sync3000 M2 Firmware	version ≤ 4.15.3

Running on/with	Platform Versions
Kalkitech Sync3000 M2	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Kalkitech Sync3000 M3 Firmware	version ≤ 4.15.3

Running on/with	Platform Versions
Kalkitech Sync3000 M3	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Kalkitech Sync3000 M4 Firmware	version ≤ 4.15.3

Running on/with	Platform Versions
Kalkitech Sync3000 M4	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Kalkitech Sync3000 M12 Firmware	version ≤ 4.15.3

Running on/with	Platform Versions
Kalkitech Sync3000 M12	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Kalkitech Sync221 M1 Firmware	version ≤ 4.15.3

Running on/with	Platform Versions
Kalkitech Sync221 M1	All versions

References (4)

https://kalkitech.com/wp-content/uploads/CYB_33631_Advisory.pdf

Source: cve@mitre.org

Vendor Advisory

https://www.kalkitech.com/cybersecurity/

Source: cve@mitre.org

Vendor Advisory

https://kalkitech.com/wp-content/uploads/CYB_33631_Advisory.pdf

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://www.kalkitech.com/cybersecurity/

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.