CVE-2021-22731

CVE-2021-22731

Vendor N/A
Product Modicon Managed Switch MCSESM* and MCSESP* V8.21 and prior
Weakness CWE-640 · Weak password recovery
Published May 26, 2021
Last update August 3, 2024

CVSS base score

What the vulnerability does

01Description

Weak Password Recovery Mechanism for Forgotten Password vulnerability exists on Modicon Managed Switch MCSESM* and MCSESP* V8.21 and prior which could cause an unauthorized password change through HTTP / HTTPS when basic user information is known by a remote attacker.

Key dates

02Disclosure timeline

May 26, 2021 CVE published
August 3, 2024 Record updated