CVE-2021-41716EPSS p70.9%

CVE-2021-41716CVE-2021-41716

mahadiscom / mahavitaran

Description

Maharashtra State Electricity Board Mahavitara Android Application 8.20 and prior is vulnerable to remote account takeover due to OTP fixation vulnerability in password rest function

Scoring

CVSS 9.8 ()
VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS1.37% probability of exploitation · percentile 70.9% · 2026-10-05T12:00:23Z
Last modified2026-07-09
Sourced from NVD + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.