CVE-2021-32087

Analyzed Analyzed - Analysis Complete

Default Credentials in Quest KACE SMA Allow Privileged FTP Access

Publication date: 2026-07-27

Last updated on: 2026-08-03

Assigner: MITRE

Description

An issue was discovered in Quest KACE Systems Deployment Appliance (SMA) 11.0.273. It installs with default user credentials. The kbftp account has a password of getbxf, which is publicly known and documented. This allows remote attackers to trivially gain privileged access to the FTP service interface, which contains MySQL backups. Sensitive information is stored in the database, such as privileged credentials for other systems.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-07-27

Last Modified

2026-08-03

Generated

2026-08-17

AI Q&A

2026-07-28

EPSS Evaluated

2026-08-16

NVD

CVE-2021-32087

EUVD

EUVD-2021-34859

Affected Vendors & Products

Vendor	Product	Version / Range
quest	kace_systems_management_appliance	11.0.273

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-798	The product contains hard-coded credentials, such as a password or cryptographic key.

Attack-Flow Graph

Executive Summary

This vulnerability involves Quest KACE Systems Deployment Appliance (SMA) 11.0.273 being installed with default user credentials. The kbftp account uses a publicly known password 'getbxf', allowing remote attackers to gain privileged access to the FTP service interface. This interface contains MySQL backups exposing sensitive information like privileged credentials for other systems.

Detection Guidance

Check if the FTP service is running on the Quest KACE SMA appliance. Use network scanning tools to identify open ports 21 (FTP) on the device. Verify if the default credentials for the kbftp account (username: kbftp, password: getbxf) are still in use.

Impact Analysis

Attackers can exploit this to access the FTP service, retrieve MySQL backups, and extract sensitive data such as privileged credentials for other systems. This could lead to further unauthorized access, data breaches, or system compromises.

Compliance Impact

This vulnerability could lead to unauthorized access and exposure of sensitive data, violating compliance requirements for GDPR and HIPAA. It may result in data breaches, unauthorized disclosures, and failure to protect personal or health information.

Mitigation Strategies

Change the default password for the kbftp account to a strong, unique password. Disable the FTP service if it is not required. Ensure all sensitive credentials stored in the MySQL backups are rotated and secured.

Hi! I’m here to help you understand CVE-2021-32087. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70