ZeroHour

CVE-2021-37184

CVSS 3.1
9.8 critical
EPSS
1%p62
Published
()
Modified
Description

A vulnerability has been identified in Industrial Edge Management (All versions < V1.3). An unauthenticated attacker could change the the password of any user in the system under certain circumstances. With this an attacker could impersonate any valid user on an affected system.

Vendors
siemens
Products
industrial edge management
Weakness
CWE-639
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

In the news

No ingested article mentions this CVE yet.