Insufficient Password Validation in ICX35-HWC-A and ICX35-HWC-E by Brocade

CVE-2021-22661

What is CVE-2021-22661?

A security weakness exists in Brocade's ICX35-HWC-A and ICX35-HWC-E, where users can change their password without entering their current password first. This flaw enables unauthorized users or external processes to modify passwords without knowledge of the original credentials, potentially compromising user accounts and system integrity. It is crucial for users to be aware of this vulnerability and implement necessary security measures.

References