{"id":"CVE-2021-27328","title":"Yeastar NeoGate TG400 91.3.0.3 devices are affected by Directory Traversal","summary":"Yeastar NeoGate TG400 91.3.0.3 devices are affected by Directory Traversal. An authenticated user can decrypt firmware and can read sensitive information, such as a password or decryption key.","severity":"medium","cvss":6.5,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cwe":["CWE-22"],"vendor":"yeastar","product":"neogate_tg400_firmware","affected":["neogate_tg400_firmware = 91.3.0.3"],"published":"2021-02-19","updated":"2026-07-05","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2021-27328","references":[{"url":"http://packetstormsecurity.com/files/161560/Yeastar-TG400-GSM-Gateway-91.3.0.3-Path-Traversal.html","label":"cve@mitre.org"},{"url":"https://github.com/SQSamir/CVE-2021-27328","label":"cve@mitre.org"},{"url":"http://packetstormsecurity.com/files/161560/Yeastar-TG400-GSM-Gateway-91.3.0.3-Path-Traversal.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://yeastar.com","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/SQSamir/CVE-2021-27328","label":"af854a3a-2127-422b-91ae-364da2661108"}],"tags":["nvd","exploit-available"],"epss":0.06356,"epssPercentile":0.93333,"ingestedAt":"2026-07-05T02:00:01.410Z","exploits":{"github":1,"githubRepos":["https://github.com/SQSamir/CVE-2021-27328"],"checkedAt":"2026-09-23T07:13:18.948Z"},"exploitAvailable":true,"slug":"CVE-2021-27328","body":"## Overview\n\nYeastar NeoGate TG400 91.3.0.3 devices are affected by Directory Traversal. An authenticated user can decrypt firmware and can read sensitive information, such as a password or decryption key.\n\n## Affected\n\n- `neogate_tg400_firmware = 91.3.0.3`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":49,"depthScoreParts":{"impact":35.8,"likelihood":1.3,"exploitation":12,"ransomware":0},"changes":[{"seq":4514,"id":"CVE-2021-27328","ts":1788887186298,"field":"exploit_available","old":"false","new":"true"},{"seq":3397,"id":"CVE-2021-27328","ts":1788886304006,"field":"exploit_available","old":"true","new":"false"},{"seq":2252,"id":"CVE-2021-27328","ts":1788882973616,"field":"exploit_available","old":"false","new":"true"},{"seq":1281,"id":"CVE-2021-27328","ts":1788882385309,"field":"exploit_available","old":"true","new":"false"},{"seq":395,"id":"CVE-2021-27328","ts":1788881820655,"field":"exploit_available","old":"false","new":"true"}]}