CVE-2018-12073

CVE-2018-12073 describes a medium-severity vulnerability in Eminent EM4544 9.10 devices, where the web interface allows users to change their password without first providing the current one. This flaw, rated 5.3 CVSS, could enable an attacker with network access to reset the administrator password, potentially through social engineering or an unattended workstation, leading to unauthorized access. While the vulnerability has a low EPSS score and no known active exploitation, public exploit code, or significant community discussion, it still poses a risk if exploited in conjunction with other attack vectors like XSS.