CVE-2021-41716

Severity

critical

Source

NVD · cve

Published

2021-12-07

CVSS

9.8

Reference

https://nvd.nist.gov/vuln/detail/CVE-2021-41716

shame 35/100

Maharashtra State Electricity Board Mahavitara Android Application 8.20 and prior is vulnerable to remote account takeover due to OTP fixation vulnerability in password rest function

Players implicated

mahadiscom · vendor mahavitaran · product

Description

Maharashtra State Electricity Board Mahavitara Android Application 8.20 and prior is vulnerable to remote account takeover due to OTP fixation vulnerability in password rest function

Sentiment · trusted sources

synthesis severe-fallout -0.80

CVE-2021-41716 represents a critical remote account takeover vulnerability in a government-issued application, indicating severe security mismanagement and potential regulatory fallout for the vendor.
cooey ↗ severe-fallout -0.90

Critical vulnerability disclosure

“Maharashtra State Electricity Board Mahavitara Android Application 8.20 and prior is vulnerable to remote account takeover due to OTP fixation vulnerability in password rest function”
app.opencve.io ↗ severe-fallout +0.00

Neutral database listing
www.cvefind.com ↗ severe-fallout +0.00

Neutral database listing
www.usatoday.com ↗ severe-fallout +0.00

Irrelevant content
SentinelOne ↗ severe-fallout +0.00

Irrelevant content
cvefeed.io ↗ severe-fallout +0.00

Irrelevant content
www.europesays.com ↗ severe-fallout +0.00

Irrelevant content

Affected FedRAMP products 0 in the catalog

No correlated FedRAMP products.