CVE-2021-22661

7.5 highEPSS 1.8%

High (7.5) in prosoft-technology. EPSS 1.8% chance of exploitation in the next 30 days.

Changing the password on the module webpage does not require the user to type in the current password first. Thus, the password could be changed by a user or external process without knowledge of the current password on the ICX35-HWC-A and ICX35-HWC-E (Versions 1.9.62 and prior).

Severity

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

EPSS: 1.8% chance of exploitation in the next 30 days; higher than 78% of CVEs (scores of 2026-10-31)
CWE: CWE-264
Published: 2021-02-26
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

prosoft-technology:icx35-hwc-a_firmware
prosoft-technology:icx35-hwc-e_firmware

References

https://us-cert.cisa.gov/ics/advisories/icsa-21-056-04
https://us-cert.cisa.gov/ics/advisories/icsa-21-056-04

Check your stack JSON