CVE-2021-36708: Prolink PRC2402M Firmware

High severity, CVSS 7.5. EPSS: 1.2% chance of exploitation in the next 30 days.

In ProLink PRC2402M V1.0.18 and older, the set_sys_init function in the login.cgi binary allows an attacker to reset the password to the administrative interface of the router.

Affected products

• Prolink PRC2402M Firmware: up to and including 1.0.18

Published 2021-08-06. Last modified 2026-06-17.