description: Weak Password Recovery Mechanism for Forgotten Password vulnerability exists on Modicon Managed Switch MCSESM* and MCSESP* V8.21 and prior which could cause an unauthorized password change through HTTP / HTTPS when basic user information is known by a remote attacker.
problem types: CWE-640: Weak   Password   Recovery   Mechanism   for   Forgotten   Password
affected:
{
product: Modicon Managed Switch MCSESM* and MCSESP* V8.21 and prior
vendor: n/a
versions:
status: affected, version: Modicon Managed Switch MCSESM* and MCSESP* V8.21 and prior
}