PT-2002-2696 · Sharp · Sharp Zaurus Pda

CVE-2002-1975

·

Publicado

2002-12-31

·

Atualizado

2025-01-16

CVSS v2.0

2.1

Baixa

VetorAV:L/AC:L/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions Sharp Zaurus PDA versions SL-5000D and SL-5500
Description The issue concerns the encryption of the screen-locking password stored in the Security.conf file. Specifically, a salt of "A0" is used, which makes it easier for local users to guess the password via brute force methods.
Recommendations For Sharp Zaurus PDA versions SL-5000D and SL-5500, consider changing the screen-locking password to a stronger one and avoid using the default salt value to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Inadequate Encryption Strength

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

CVE-2002-1975

Produtos afetados

Sharp Zaurus Pda