CVE-2021-1144

CVE-2021-1144 (CMX Privilege Escalation) affects Cisco Connected Mobile Experiences (CMX). The issue is an authorization-check flaw in password-change handling that allows a remote, authenticated user without administrative privileges to alter the password of any user, including admins, by sendin...

High-Severity Cisco Flaw Found in CMX Software For Retailers

A high-severity flaw in Cisco’s smart Wi-Fi solution for retailers could allow a remote attacker to alter the password of any account user on affected systems. The vulnerability is part of a number of patches issued by Cisco addressing 67 high-severity CVEs on Wednesday. This included flaws found...