Vulnerability Intelligence Report
Cypress Solutions CTM-200/CTM-ONE 1.3.6 Hard-coded Credentials Remote Root
CVE-2021-47744
Cypress Solutions CTM-200/CTM-ONE 1.3.6 contains hard-coded credentials vulnerability in Linux distribution that exposes root access. Attackers can exploit the static 'Chameleon' password to gain remote root access via Telnet or SSH on affected devices.
No Active Exploit Signals
CVSS Base Score
9.3
CRITICAL
EPSS Probability:0.28%
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
—
Authentication
—
Weaponization
—
SSVC Action
—
Weaknesses (CWE)
CWE-798 ↗Use of Hard-coded Credentials
Affected Products & Versions
| Vendor | Product | Affected Versions |
|---|---|---|
| Cypress | ONE | - (affected) |
References & Technical Advisories
No reference links found.
Threat Intelligence Signals
EPSS Score
0.282%
GitHub Advisory
Identity & Timeline
| Status | PUBLISHED |
| Assigning Authority | VulnCheck · Bug Bounty Provider · USA |
| Reserved | 2025-12-31T02:09:17 |
| Published | 2025-12-31T18:39:11 |
| Patch Date | 2021-09-21 |
| Last Updated | 2026-01-02T16:23:14 |
Community Chatter & Buzz