CVE-2024-28143

The Image Access Scan2Net scanning software is vulnerable to an account takeover due to an insecure password change function at /cgi/admin.cgi . The application fails to require the current or old password during a password change, allowing an attacker to forcefully set a new password for a user ...