Lucene search

K
cvelistSiemensCVELIST:CVE-2021-37184
HistorySep 14, 2021 - 10:47 a.m.

CVE-2021-37184

2021-09-1410:47:48
CWE-639
siemens
www.cve.org
1
vulnerability
industrial edge management
unauthenticated
password change
impersonation

AI Score

9.6

Confidence

High

EPSS

0.002

Percentile

54.1%

A vulnerability has been identified in Industrial Edge Management (All versions < V1.3). An unauthenticated attacker could change the the password of any user in the system under certain circumstances. With this an attacker could impersonate any valid user on an affected system.

CNA Affected

[
  {
    "product": "Industrial Edge Management",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V1.3"
      }
    ]
  }
]

AI Score

9.6

Confidence

High

EPSS

0.002

Percentile

54.1%

Related for CVELIST:CVE-2021-37184