← Back

Eminent Online

eminent-online

1 CVE • 1 product

Products (1)

Click to collapse
Toggle
Em4544
em4544
1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2018-12073
1Eminent Online
1Em4544
Nov 21, 2024
Jun 17, 2018
N/A· v4
5.3 MEDIUM· v3
2.9 LOW· v2
An issue was discovered on Eminent EM4544 9.10 devices. The device does not require the user's current password to set a new one within the web interface. Therefore, it is possible to exploit this issue (e.g., in combina...Show more
An issue was discovered on Eminent EM4544 9.10 devices. The device does not require the user's current password to set a new one within the web interface. Therefore, it is possible to exploit this issue (e.g., in combination with a successful XSS, or at an unattended workstation) to change the admin password to an attacker-chosen value without knowing the current password.Show less