CVE-2024-28143

The Image Access Scan2Net software (versions 7.40 and earlier , 7.42 and earlier , and 7.42B and earlier ) contains a vulnerability in its password change function at /cgi/admin.cgi . The root cause is that the application fails to require the current or old password during a password change. Thi...