CVE-2021-22661

Changing the password on the module webpage does not require the user to type in the current password first

published February 26, 2021

CVSS
—
EPSS
2%
Percentile
78.3
In the wild
Unconfirmed
What it is

Changing the password on the module webpage does not require the user to type in the current password first. Thus, the password could be changed by a user or external process without knowledge of the current password on the ICX35-HWC-A and ICX35-HWC-E (Versions 1.9.62 and prior).

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01800 · 78.3th percentile
Published
2021-02-26T14:50Z
EPSS history
Timeline
  • 26 FEB 14:50Z
    Changing the password on the module webpage does not require the user to type in the current password first
    cvelistv5