CVE-2021-22669: Critical severity advantech webaccess/scada vulnerability
Incorrect permissions are set to default on the ‘Project Management’ page of WebAccess/SCADA portal of WebAccess/SCADA Versions 9.0.1 and prior, which may allow a low-privileged user to update an administrator’s password and login as an administrator to escalate privileges on the system.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2021-22669?
CVE-2021-22669 has a CVSS base score that indicates it is a high-severity vulnerability due to its potential for privilege escalation.
How do I fix CVE-2021-22669?
To fix CVE-2021-22669, update the WebAccess/SCADA software to version 9.0.2 or later to ensure proper permissions are enforced.
Who is affected by CVE-2021-22669?
CVE-2021-22669 affects users of Advantech WebAccess/SCADA Versions 9.0.1 and prior.
What can an attacker do by exploiting CVE-2021-22669?
By exploiting CVE-2021-22669, an attacker could gain unauthorized administrative access by resetting an admin's password.
Is CVE-2021-22669 a local or remote vulnerability?
CVE-2021-22669 is primarily a local vulnerability, allowing low-privileged users on the same system to escalate their privileges.