← Database

CVE-2021-41716

CRITICAL CVSS: 9.8 Published: 2021-12-07 Modified: 2026-07-09

Description

Maharashtra State Electricity Board Mahavitara Android Application 8.20 and prior is vulnerable to remote account takeover due to OTP fixation vulnerability in password rest function

Affected Platforms

Mahadiscom Mahavitaran

Weakness Type

CWE-287

References