CVE-2016-4511

Name of the Vulnerable Software and Affected Versions ABB PCM600 versions prior to 2.7

Description The issue is related to the use of reversible password encryption for passwords stored in the ACTConfig configuration file. This could allow a local attacker to gain access to user passwords. The problem is also described as an improper hash algorithm used for the main application password, making it easier for local users to obtain sensitive information by reading the ACTConfig file.

Recommendations For ABB PCM600 versions prior to 2.7, update to version 2.7 or later to resolve the issue. As a temporary workaround, consider restricting local access to the ACTConfig configuration file to minimize the risk of exploitation.