Attacker Value
Unknown
(0 users assessed)
Exploitability
Unknown
(0 users assessed)
User Interaction
Unknown
Privileges Required
Unknown
Attack Vector
Unknown
0

CVE-2021-22669

Disclosure Date: April 26, 2021
Add MITRE ATT&CK tactics and techniques that apply to this CVE.

Description

Incorrect permissions are set to default on the ‘Project Management’ page of WebAccess/SCADA portal of WebAccess/SCADA Versions 9.0.1 and prior, which may allow a low-privileged user to update an administrator’s password and login as an administrator to escalate privileges on the system.

Add Assessment

No one has assessed this topic. Be the first to add your voice to the community.

General Information

Products

  • Advantech WebAccess/SCADA

Additional Info

Technical Analysis