CVE-2021-22661: Prosoft-Technology ICX35-Hwc-A Firmware

High severity, CVSS 7.5. EPSS: 1.8% chance of exploitation in the next 30 days.

Changing the password on the module webpage does not require the user to type in the current password first. Thus, the password could be changed by a user or external process without knowledge of the current password on the ICX35-HWC-A and ICX35-HWC-E (Versions 1.9.62 and prior).

Affected products

• Prosoft-Technology ICX35-Hwc-A Firmware: up to and including 1.9.62
• Prosoft-Technology ICX35-Hwc-E Firmware: up to and including 1.9.62

Published 2021-02-26. Last modified 2026-06-17.