PT-2022-7913 · Unknown · Sicunet Access Controller

·

CVE-2017-20040

·

تاريخ النشر

2022-06-11

·

تاريخ التحديث

2022-06-17

CVSS v3.1

5.9

متوسطة

المتجهAV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Name of the Vulnerable Software and Affected Versions SICUNET Access Controller version 0.32-05z
Description A vulnerability was found in the Password Storage component, leading to weak encryption. The manipulation requires a local attack.
Recommendations For SICUNET Access Controller version 0.32-05z, consider updating the password storage mechanism to use stronger encryption algorithms to mitigate the risk of weak encryption. As a temporary workaround, restrict local access to minimize the risk of exploitation.

إصلاح

Cleartext Storage of Sensitive Information

وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾

تصنيف نقاط الضعف

المعرّفات ذات الصلة

CVE-2017-20040

المنتجات المتأثرة

Sicunet Access Controller