CVE-2021-37184

9.8CRITICAL

Key Information:

Vendor
Siemens
Status
Industrial Edge Management
Vendor
CVE Published:
14 September 2021

Summary

A vulnerability has been identified in Industrial Edge Management (All versions < V1.3). An unauthenticated attacker could change the the password of any user in the system under certain circumstances. With this an attacker could impersonate any valid user on an affected system.

Affected Version(s)

Industrial Edge Management All versions < V1.3

References

https://cert-portal.siemens.com/productcert/pdf/ssa-69231...
x_refsource_MISC

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.