CVE-2021-32926

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

When an authenticated password change request takes place, this vulnerability could allow the attacker to intercept the message that includes the legitimate, new password hash and replace it with an illegitimate hash. The user would no longer be able to authenticate to the controller (Micro800: All versions, MicroLogix 1400: Version 21 and later) causing a denial-of-service condition

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-300

Affected software

No affected versions have been published.

Timeline

Published: Jun 3, 2021
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-329276.1An attacker may be able to inject client-side JavaScript code on multiple instances within all versions of Uffizio GPS Tracker.CVE-2021-329289.8The Sentinel LDK Run-Time Environment installer (Versions 7.6 and prior) adds a firewall rule named “Sentinel License Manager” that allows i CVE-2021-329298.8All versions of Uffizio GPS Tracker may allow an attacker to perform unintended actions on behalf of a user.CVE-2021-32935.3emlog v5.3.1 has full path disclosure vulnerability in t/index.php, which allows an attacker to see the path to the webroot/file.CVE-2021-329309.8The affected product’s configuration is vulnerable due to missing authentication, which may allow an attacker to change configurations and e CVE-2021-329317.8An uninitialized pointer in FATEK Automation FvDesigner, Versions 1.5.88 and prior may be exploited while the application is processing proj CVE-2021-329327.5The affected product is vulnerable to a SQL injection, which may allow an unauthorized attacker to disclose information on the iView (versio CVE-2021-329339.8An attacker could leverage an API to pass along a malicious file that could then manipulate the process creation command line in MDT AutoSav CVE-2021-329347.5The affected ThroughTek P2P products (SDKs using versions before 3.1.5, any versions with nossl tag, device firmware not using AuthKey for I CVE-2021-329359.8The affected Cognex product, the In-Sight OPC Server versions v5.7.4 (96) and prior, deserializes untrusted data, which could allow a remote CVE-2021-329367.8An out-of-bounds write issue exists in the DXF file-recovering procedure in the Drawings SDK (All versions prior to 2022.4) resulting from t CVE-2021-329377.5An attacker can gain knowledge of a session temporary working folder where the getfile and putfile commands are used in MDT AutoSave version