CVE-2021-22669CWE-732

Incorrect permissions are set to default on the ‘Project Management’ page of WebAccess/SCADA portal of WebAccess/SCADA Versions 9.0.1 and prior, which may…

published April 26, 2021

CVSS
—
EPSS
1%
Percentile
67.3
In the wild
Unconfirmed
What it is

Incorrect permissions are set to default on the ‘Project Management’ page of WebAccess/SCADA portal of WebAccess/SCADA Versions 9.0.1 and prior, which may allow a low-privileged user to update an administrator’s password and login as an administrator to escalate privileges on the system.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01174 · 67.3th percentile
Weakness
CWE-732 · Incorrect Permission Assignment for Critical Resource
Published
2021-04-26T18:59Z
EPSS history
Timeline
  • 26 APR 18:59Z
    Incorrect permissions are set to default on the ‘Project Management’ page of WebAccess/SCADA portal of WebAccess/SCADA Versions 9.0.1 and prior, which may…
    cvelistv5