Skip to content
OpenAdvisories
High · 8.0 CVE-2021-22825 EUVD-2021-9960GHSA-mfxr-wxm4-4j5r

A CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists that could allow an attacker to access the syste…

Published Jan 28, 2022 · Updated Sep 8, 2025 · Assigned by schneider

Description

A CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists that could allow an attacker to access the system with elevated privileges when a privileged account clicks on a malicious URL that compromises the security token. Affected Products: AP7xxxx and AP8xxx with NMC2 (V6.9.6 or earlier), AP7xxx and AP8xxx with NMC3 (V1.1.0.3 or earlier), and APDU9xxx with NMC3 (V1.0.0.28 or earlier)

Advisories 2

References