CVE-2021-31245: Openmptcprouter

Medium severity, CVSS 5.9. EPSS: 2.1% chance of exploitation in the next 30 days.

omr-admin.py in openmptcprouter-vps-admin 0.57.3 and earlier compares the user provided password with the original password in a length dependent manner, which allows remote attackers to guess the password via a timing attack.

Affected products

• Openmptcprouter Openmptcprouter: up to and including 0.57.3

Published 2021-05-06. Last modified 2026-06-17.