CVE-2021-22825

Name of the Vulnerable Software and Affected Versions AP7xxxx and AP8xxx with NMC2 versions 6.9.6 or earlier AP7xxx and AP8xxx with NMC3 versions 1.1.0.3 or earlier APDU9xxx with NMC3 versions 1.0.0.28 or earlier

Description A vulnerability exists that could allow an attacker to access the system with elevated privileges when a privileged account clicks on a malicious URL that compromises the security token.

Recommendations For AP7xxxx and AP8xxx with NMC2 versions 6.9.6 or earlier, update to a version later than 6.9.6. For AP7xxx and AP8xxx with NMC3 versions 1.1.0.3 or earlier, update to a version later than 1.1.0.3. For APDU9xxx with NMC3 versions 1.0.0.28 or earlier, update to a version later than 1.0.0.28. As a temporary workaround, consider avoiding the use of privileged accounts to click on potentially malicious URLs until a patch is available.