CVE-2021-41716

PoC —

CVSS 3.1

9.8 critical

EPSS

1%p69

Published

Dec 7, 2021 (Dec 7, 2021)

Modified

Jul 9, 2026

Description

Maharashtra State Electricity Board Mahavitara Android Application 8.20 and prior is vulnerable to remote account takeover due to OTP fixation vulnerability in password rest function

Vendors: mahadiscom
Products: mahavitaran
Weakness: CWE-287
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.3%)

In the news0 stories

No ingested article mentions this CVE yet.