NetSight
IP …
critical9.8

CVE-2021-22731

Weak Password Recovery Mechanism for Forgotten Password vulnerability exists on Modicon Managed Switch MCSESM* and MCSESP* V8.21 and prior which could cause an…

Impact

Weak Password Recovery Mechanism for Forgotten Password vulnerability exists on Modicon Managed Switch MCSESM* and MCSESP* V8.21 and prior which could cause an unauthorized password change through HTTP / HTTPS when basic user information is known by a remote attacker.

Affected products

VendorProductAffected versions
Schneider-ElectricMcsesp083f23g0 Firmware
before 8.22
Schneider-ElectricMcsesp083f23g0t Firmware
before 8.22
Schneider-ElectricMcsesm043f23f0 Firmware
before 8.22
Schneider-ElectricMcsesm053f1cu0 Firmware
before 8.22
Schneider-ElectricMcsesm063f2cu0 Firmware
before 8.22
Schneider-ElectricMcsesm053f1cs0 Firmware
before 8.22
Schneider-ElectricMcsesm063f2cs0 Firmware
before 8.22
Schneider-ElectricMcsesm083f23f0 Firmware
before 8.22
Schneider-ElectricMcsesm103f2cu0 Firmware
before 8.22
Schneider-ElectricMcsesm083f23f0h Firmware
before 8.22
Schneider-ElectricMcsesm103f2cu0h Firmware
before 8.22
Schneider-ElectricMcsesm103f2cs0h Firmware
before 8.22

Weakness classification

CWE-640

References