CVE-2021-22661
—CVSS 3.1
7.5 high
EPSS
1%p61
Published
()
Modified
Description
Changing the password on the module webpage does not require the user to type in the current password first. Thus, the password could be changed by a user or external process without knowledge of the current password on the ICX35-HWC-A and ICX35-HWC-E (Versions 1.9.62 and prior).
- Vendors
- prosoft-technology
- Products
- icx35-hwc-a firmware, icx35-hwc-e firmware
- Weakness
- CWE-264
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
In the news0 stories
No ingested article mentions this CVE yet.