CVE-2021-36708

HIGH

Prolink Prc2402m Firmware < 1.0.18 - Password Reset Weakness

Title source: rule
STIX 2.1

Description

In ProLink PRC2402M V1.0.18 and older, the set_sys_init function in the login.cgi binary allows an attacker to reset the password to the administrative interface of the router.

References (1)

Scores

CVSS v3 7.5
EPSS 0.0029
EPSS Percentile 52.4%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Details

CWE
CWE-640
Status published
Products (1)
prolink/prc2402m_firmware < 1.0.18
Published Aug 06, 2021
Tracked Since Feb 18, 2026