CVE-2021-37184

A vulnerability has been identified in Industrial Edge Management (All versions < V1.3). An unauthenticated attacker could change the the password of any user in the system under certain circumstances. With this an attacker could impersonate any valid user on an affected system.

• CWE-639

• https://cert-portal.siemens.com/productcert/pdf/ssa-692317.pdfPatch, Vendor Advisory
• https://cert-portal.siemens.com/productcert/pdf/ssa-692317.pdfPatch, Vendor Advisory

Published

Sep 14, 2021

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-37179A vulnerability has been identified in Solid Edge SE2021 (Al…7.8
• CVE-2021-3718A denial of service vulnerability was reported in some Think…4.6
• CVE-2021-37180A vulnerability has been identified in Solid Edge SE2021 (Al…7.8
• CVE-2021-37181A vulnerability has been identified in Cerberus DMS V4.0 (Al…10
• CVE-2021-37182A vulnerability has been identified in SCALANCE XM408-4C (Al…7.5
• CVE-2021-37183A vulnerability has been identified in SINEMA Remote Connect…6.5
• CVE-2021-37185A vulnerability has been identified in SIMATIC Drive Control…7.5
• CVE-2021-37186A vulnerability has been identified in LOGO! CMR2020 (All ve…5.4
• CVE-2021-37187An issue was discovered on Digi TransPort devices through 20…6.5
• CVE-2021-37188An issue was discovered on Digi TransPort devices through 20…8.8
• CVE-2021-37189An issue was discovered on Digi TransPort Gateway devices th…7.5
• CVE-2021-3719A potential vulnerability in the SMI callback function that …6.7