CVE-2021-44564
Estado: ModificadaAlta (8.1)—
A security vulnerability originally reported in the SYNC2101 product, and applicable to specific sub-families of SYNC devices, allows an attacker to download the configuration file used in the device and apply a modified configuration file back to the device. The attack requires network access to the SYNC device and knowledge of its IP address. The attack exploits the unsecured communication channel used between the administration tool Easyconnect and the SYNC device (in the affected family of SYNC products).
CVSS
- Versión: 3.1
- Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
- Puntuación base: 8.1
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 0.92%
- Percentil entre todas las CVEs puntuadas: 59
- Fecha de la puntuación: 4/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (20)
Kalkitech — Sync2000-m1 FirmwareKalkitech — Sync2000-m2 FirmwareKalkitech — Sync2000-m4 FirmwareKalkitech — Sync2101-m1 FirmwareKalkitech — Sync2101-m2 FirmwareKalkitech — Sync2101-m6 FirmwareKalkitech — Sync2101-m7 FirmwareKalkitech — Sync2101-m8 FirmwareKalkitech — Sync2111-m2 FirmwareKalkitech — Sync2111-m3 FirmwareKalkitech — Sync221-m1 FirmwareKalkitech — Sync241-m1 FirmwareKalkitech — Sync241-m2 FirmwareKalkitech — Sync241-m4 FirmwareKalkitech — Sync261-m1 FirmwareKalkitech — Sync3000-m12 FirmwareKalkitech — Sync3000-m1 FirmwareKalkitech — Sync3000-m2 FirmwareKalkitech — Sync3000-m3 FirmwareKalkitech — Sync3000-m4 Firmware
CWE
- NVD-CWE-noinfo
Referencias
JSON original (NVD)
Mostrar
{
"id": "CVE-2021-44564",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 6.8,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"authentication": "NONE",
"integrityImpact": "PARTIAL",
"accessComplexity": "MEDIUM",
"availabilityImpact": "PARTIAL",
"confidentialityImpact": "PARTIAL"
},
"acInsufInfo": false,
"impactScore": 6.4,
"baseSeverity": "MEDIUM",
"obtainAllPrivilege": false,
"exploitabilityScore": 8.6,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
],
"cvssMetricV31": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 8.1,
"attackVector": "NETWORK",
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"integrityImpact": "HIGH",
"userInteraction": "NONE",
"attackComplexity": "HIGH",
"availabilityImpact": "HIGH",
"privilegesRequired": "NONE",
"confidentialityImpact": "HIGH"
},
"impactScore": 5.9,
"exploitabilityScore": 2.2
}
]
},
"affected": [
{
"source": "cve@mitre.org",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2022-01-06T12:15:08.190",
"references": [
{
"url": "https://kalkitech.com/wp-content/uploads/CYB_33631_Advisory.pdf",
"tags": [
"Vendor Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "https://www.kalkitech.com/cybersecurity/",
"tags": [
"Vendor Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "https://kalkitech.com/wp-content/uploads/CYB_33631_Advisory.pdf",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://www.kalkitech.com/cybersecurity/",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A security vulnerability originally reported in the SYNC2101 product, and applicable to specific sub-families of SYNC devices, allows an attacker to download the configuration file used in the device and apply a modified configuration file back to the device. The attack requires network access to the SYNC device and knowledge of its IP address. The attack exploits the unsecured communication channel used between the administration tool Easyconnect and the SYNC device (in the affected family of SYNC products)."
},
{
"lang": "es",
"value": "Una vulnerabilidad de seguridad reportada originalmente en el producto SYNC2101, y aplicable a subfamilias específicas de dispositivos SYNC, permite a un atacante descargar el archivo de configuración usado en el dispositivo y aplicar un archivo de configuración modificado al dispositivo. El ataque requiere el acceso a la red del dispositivo SYNC y el conocimiento de su dirección IP. El ataque aprovecha el canal de comunicación no seguro usado entre la herramienta de administración Easyconnect y el dispositivo SYNC (en la familia de productos SYNC afectados)."
}
],
"lastModified": "2026-06-17T04:12:33.880",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:kalkitech:sync241-m1_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "88D85FB1-6FF7-4D55-A26A-352B7EB03722",
"versionEndIncluding": "4.15.3"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:kalkitech:sync241-m1:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "4B1AA2BC-CA0A-4028-90D1-547CB0031389"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:kalkitech:sync241-m2_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "911A0B2D-5290-42C5-9877-160B20F4D9AD",
"versionEndIncluding": "4.15.3"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:kalkitech:sync241-m2:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "72558BCA-8D30-4842-BA8A-51BB4D26915C"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:kalkitech:sync241-m4_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D39E14B2-2C63-42FE-ABF3-6016E4F41432",
"versionEndIncluding": "4.15.3"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:kalkitech:sync241-m4:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "32E82DDF-D777-44DC-8FBF-C3F04663F9A9"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:kalkitech:sync261-m1_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FFFF582F-D51E-428A-B00E-1F8519FC609A",
"versionEndIncluding": "4.15.3"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:kalkitech:sync261-m1:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "E3B18F41-ED50-42D3-B9D4-3DEF640EE228"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:kalkitech:sync2000-m1_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F52CE9C4-7586-4342-8EB4-4F8E6E514A69",
"versionEndIncluding": "4.15.3"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:kalkitech:sync2000-m1:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "A971040A-55A6-4833-8750-AF1870452FD6"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:kalkitech:sync2000-m2_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AE688854-F15C-4617-BBF5-ABB08CD8304C",
"versionEndIncluding": "4.15.3"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:kalkitech:sync2000-m2:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "EEA1AC32-480A-4FF1-8A01-5B59B2D5C139"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:kalkitech:sync2000-m4_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D164D066-98FB-4326-9BCE-D1AC32F02011",
"versionEndIncluding": "4.15.3"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:kalkitech:sync2000-m4:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "06578C60-4641-4B0D-8CD3-C1F10A56C1E8"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:kalkitech:sync2101-m1_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "317C3804-E08B-4EC3-9DCA-C34758A6488F",
"versionEndIncluding": "4.15.3"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:kalkitech:sync2101-m1:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "74E4360A-504B-46DE-B94A-6055B16AA697"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:kalkitech:sync2101-m2_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "615A140F-1611-4170-BE74-E0A8AFA1E1F8",
"versionEndIncluding": "4.15.3"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:kalkitech:sync2101-m2:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "F5C62DCF-E364-4EA1-B82C-531BDB45570A"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:kalkitech:sync2101-m6_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EAC44331-522B-49A7-BC5E-DD3A072F9453",
"versionEndIncluding": "4.15.3"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:kalkitech:sync2101-m6:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "E1AC7FC0-6572-463D-A325-51AC5B7F8E6C"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:kalkitech:sync2101-m7_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DAB56747-F98E-4064-A228-8C383384702B",
"versionEndIncluding": "4.15.3"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:kalkitech:sync2101-m7:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "A4F70EF2-3CDA-40C0-8683-19D74C202ACF"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:kalkitech:sync2101-m8_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A7FD3B17-A78B-4CCD-965C-29DCEAFB41FC",
"versionEndIncluding": "4.15.3"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:kalkitech:sync2101-m8:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "231542BD-36DD-4B36-A8A9-9E4FA740E04B"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:kalkitech:sync2111-m2_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "64050E57-2E3A-4752-90FC-4F0415F83641",
"versionEndIncluding": "4.15.3"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:kalkitech:sync2111-m2:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "49E004F8-D287-43A2-AF98-0269DAA3DA24"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:kalkitech:sync2111-m3_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6C7FE851-E9D8-4ADE-A57A-D869BB8CF386",
"versionEndIncluding": "4.15.3"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:kalkitech:sync2111-m3:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "550A1D61-948A-48CE-9900-CE86FE2E3347"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:kalkitech:sync3000-m1_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D05C9788-A6D1-458B-A926-706FCD175FEB",
"versionEndIncluding": "4.15.3"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:kalkitech:sync3000-m1:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "9F51E3F9-E8D7-4BF6-B435-F6926B4E2A6B"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:kalkitech:sync3000-m2_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F410F404-6ECA-4303-94B3-D223D78B85F8",
"versionEndIncluding": "4.15.3"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:kalkitech:sync3000-m2:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "F0595CA0-9FAA-4FA2-8598-E6C5BE144055"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:kalkitech:sync3000-m3_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F141A804-2F76-4AC3-8872-3AF1A7E0257F",
"versionEndIncluding": "4.15.3"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:kalkitech:sync3000-m3:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "1D704951-FA3B-4829-96A2-5EA36075DFF8"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:kalkitech:sync3000-m4_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "626BCE19-E438-4ADE-9771-671B687FF0C8",
"versionEndIncluding": "4.15.3"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:kalkitech:sync3000-m4:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "727E9705-10AF-4889-823A-7EFC7C520410"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:kalkitech:sync3000-m12_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9BDF76E6-3116-4AD2-BF74-E05757779507",
"versionEndIncluding": "4.15.3"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:kalkitech:sync3000-m12:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "120D54D9-B91A-405E-834C-4091C333541C"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:kalkitech:sync221-m1_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E5665FBD-37BE-4F60-B6B4-D67C1798B3B3",
"versionEndIncluding": "4.15.3"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:kalkitech:sync221-m1:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "735A8425-DA8A-4787-BBD5-1CBE83421D1E"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
],
"sourceIdentifier": "cve@mitre.org"
}