CVE-2021-36708

High

In ProLink PRC2402M V1.0.18 and older, the set_sys_init function in the login.cgi binary allows an attacker to reset the password to the…

mitre·CWE-640·Published 2021-08-06

CVSS

7.5

EPSS

0.01

KEV

Exploits

cve.orgen

176 chars

In ProLink PRC2402M V1.0.18 and older, the set_sys_init function in the login.cgi binary allows an attacker to reset the password to the administrative interface of the router.

NVDen

176 chars

In ProLink PRC2402M V1.0.18 and older, the set_sys_init function in the login.cgi binary allows an attacker to reset the password to the administrative interface of the router.

En ProLink PRC2402M versiones V1.0.18 y anteriores, la función set_sys_init en el binario login.cgi permite a un atacante restablecer la contraseña de la interfaz administrativa del router

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
2.0	Primary	NVD	5.0	10.0	2.9	AV:N/AC:L/Au:N/C:P/I:N/A:N
3.1	Primary	NVD	7.5	3.9	3.6	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N