CVE-2024-47784CWE-620

Unverified Password Change

Low · published April 30, 2025

CVSS v4.0
2.1
EPSS
0%
Percentile
8.8
In the wild
Unconfirmed
What it is

Unverified Password Change for ANC software that allows an authenticated attacker to bypass the old Password check in the password change form via a web HMI

This issue affects ANC software version 1.1.4 and earlier.

The record
Technical detail
CVSS v4.0
2.1 · LOW
Vector
CVSS:4.0/AV:A/AC:H/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/R:U
EPSS
0.00195 · 8.8th percentile
Weakness
CWE-620 · Unverified Password Change
Published
2025-04-30T18:17Z
EPSS history
Timeline
  • 30 APR 18:17Z
    Unverified Password Change
    cvelistv5