https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 10 Oct 2026 19:55:49 +0000 https://cve.radiocsirt.org/vuln/bdu:2021-00363 bdu:2021-00363 https://cve.radiocsirt.org/vuln/bdu:2021-00363 https://cve.radiocsirt.org/vuln/certfr-2021-avi-030 certfr-2021-avi-030 https://cve.radiocsirt.org/vuln/certfr-2021-avi-030 https://cve.radiocsirt.org/vuln/cisco-sa-cmxpe-75asy9k <p>A vulnerability in Cisco Connected Mobile Experiences (CMX) could allow a remote, authenticated attacker without administrative privileges to alter the password of any user on an affected system. The vulnerability is due to incorrect handling of authorization checks for changing a password. An authenticated attacker without administrative privileges could exploit this vulnerability by sending a modified HTTP request to an affected device. A successful exploit could allow the attacker to alter the passwords of any user on the system, including an administrative user, and then impersonate that user. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.</p> <p>A vulnerability in Cisco Connected Mobile Experiences (CMX) could allow a remote, authenticated attacker without administrative privileges to alter the password of any user on an affected system. The vulnerability is due to incorrect handling of authorization checks for changing a password. An authenticated attacker without administrative privileges could exploit this vulnerability by sending a modified HTTP request to an affected device. A successful exploit could allow the attacker to alter the passwords of any user on the system, including an administrative user, and then impersonate that user. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.</p> https://cve.radiocsirt.org/vuln/cisco-sa-cmxpe-75asy9k https://cve.radiocsirt.org/vuln/cnvd-2021-03256 cnvd-2021-03256 https://cve.radiocsirt.org/vuln/cnvd-2021-03256 https://cve.radiocsirt.org/vuln/euvd-2026-200970 EUVD-2026-200970 https://cve.radiocsirt.org/vuln/euvd-2026-200970 https://cve.radiocsirt.org/vuln/fkie_cve-2021-1144 <p>A vulnerability in Cisco Connected Mobile Experiences (CMX) could allow a remote, authenticated attacker without administrative privileges to alter the password of any user on an affected system. The vulnerability is due to incorrect handling of authorization checks for changing a password. An authenticated attacker without administrative privileges could exploit this vulnerability by sending a modified HTTP request to an affected device. A successful exploit could allow the attacker to alter the passwords of any user on the system, including an administrative user, and then impersonate that user.</p> <p>A vulnerability in Cisco Connected Mobile Experiences (CMX) could allow a remote, authenticated attacker without administrative privileges to alter the password of any user on an affected system. The vulnerability is due to incorrect handling of authorization checks for changing a password. An authenticated attacker without administrative privileges could exploit this vulnerability by sending a modified HTTP request to an affected device. A successful exploit could allow the attacker to alter the passwords of any user on the system, including an administrative user, and then impersonate that user.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-1144 https://cve.radiocsirt.org/vuln/ghsa-w7xj-fmh9-68cc <p>A vulnerability in Cisco Connected Mobile Experiences (CMX) could allow a remote, authenticated attacker without administrative privileges to alter the password of any user on an affected system. The vulnerability is due to incorrect handling of authorization checks for changing a password. An authenticated attacker without administrative privileges could exploit this vulnerability by sending a modified HTTP request to an affected device. A successful exploit could allow the attacker to alter the passwords of any user on the system, including an administrative user, and then impersonate that user.</p> <p>A vulnerability in Cisco Connected Mobile Experiences (CMX) could allow a remote, authenticated attacker without administrative privileges to alter the password of any user on an affected system. The vulnerability is due to incorrect handling of authorization checks for changing a password. An authenticated attacker without administrative privileges could exploit this vulnerability by sending a modified HTTP request to an affected device. A successful exploit could allow the attacker to alter the passwords of any user on the system, including an administrative user, and then impersonate that user.</p> https://cve.radiocsirt.org/vuln/ghsa-w7xj-fmh9-68cc https://cve.radiocsirt.org/vuln/gsd-2021-1144 gsd-2021-1144 https://cve.radiocsirt.org/vuln/gsd-2021-1144