CVE-2021-37184

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

A vulnerability has been identified in Industrial Edge Management (All versions < V1.3). An unauthenticated attacker could change the the password of any user in the system under certain circumstances. With this an attacker could impersonate any valid user on an affected system.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-639

Affected software

No affected versions have been published.

Timeline

Published
Sep 14, 2021
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-371857.5A vulnerability has been identified in SIMATIC Drive Controller family (All versions >= V2.9.2 < V2.9.4), SIMATIC ET 200SP Open Controller CCVE-2021-371865.4A vulnerability has been identified in LOGO! CMR2020 (All versions < V2.2), LOGO! CMR2040 (All versions < V2.2), SIMATIC RTU3010C (All versiCVE-2021-371876.5An issue was discovered on Digi TransPort devices through 2021-07-21. An authenticated attacker may read a password file (with reversible paCVE-2021-371888.8An issue was discovered on Digi TransPort devices through 2021-07-21. An authenticated attacker may load customized firmware (because the boCVE-2021-371897.5An issue was discovered on Digi TransPort Gateway devices through 5.2.13.4. They do not set the Secure attribute for sensitive cookies in HTCVE-2021-37196.7A potential vulnerability in the SMI callback function that saves and restore boot script tables used for resuming from sleep state in some CVE-2021-371904.3A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.0 SP2). The affected software has an information discCVE-2021-371914.3A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.0 SP2). An unauthenticated attacker in the same netwoCVE-2021-371924.3A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.0 SP2). The affected software has an information discCVE-2021-371934.3A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.0 SP2). An unauthenticated attacker in the same netwoCVE-2021-371947.5A vulnerability has been identified in COMOS V10.2 (All versions only if web components are used), COMOS V10.3 (All versions < V10.3.3.3 onlCVE-2021-371956.1A vulnerability has been identified in COMOS V10.2 (All versions only if web components are used), COMOS V10.3 (All versions < V10.3.3.3 onl
CVE-2021-37184: Critical severity, CVSS 9.8 | Vulnix