CVE-2021-37184 is a vulnerability in Siemens Industrial Edge Management
Published on September 14, 2021
A vulnerability has been identified in Industrial Edge Management (All versions < V1.3). An unauthenticated attacker could change the the password of any user in the system under certain circumstances. With this an attacker could impersonate any valid user on an affected system.
Weakness Type
What is an Insecure Direct Object Reference / IDOR Vulnerability?
The system's authorization functionality does not prevent one user from gaining access to another user's data or record by modifying the key value identifying the data.
CVE-2021-37184 has been classified to as an Insecure Direct Object Reference / IDOR vulnerability or weakness.
Products Associated with CVE-2021-37184
Want to know whenever a new CVE is published for Siemens Industrial Edge Management? stack.watch will email you.
Affected Versions
Siemens Industrial Edge Management Version All versions < V1.3 is affected by CVE-2021-37184Exploit Probability
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.