CVE-2019-25436 — Sricam DeviceViewer 3.12.0.1 Password Change Security Bypass
Sricam DeviceViewer 3.12.0.1 contains a password change security bypass vulnerability that allows authenticated users to change passwords without proper validation of the old pa…
Published: 2026-02-20 · CVSS: 5.1 · CVSS 4.0
Sricam DeviceViewer 3.12.0.1 contains a password change security bypass vulnerability that allows authenticated users to change passwords without proper validation of the old password field. Attackers can inject a large payload into the old password parameter during the change password process to bypass validation and set an arbitrary new password.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7