PT-2022-7727

CVE-2013-10004

Published

2022-05-24

Updated

2022-06-08

Description by

CVSS 3.1

6.5

Medium

MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Telecommunication Software SAMwin Contact Center Suite version 5.1

Description A critical issue was found in the Password Handler component, specifically affecting the passwordScramble function in the SAMwinLIBVB.dll library. This is due to an incorrect implementation of a hashing function, leading to predictable authentication possibilities.

Recommendations For Telecommunication Software SAMwin Contact Center Suite version 5.1, upgrade to version 6.2 to address the issue. It is recommended to upgrade the affected Password Handler component.

Exploitability

Exploit

Fix

Impacts

Researchers

Max Moser

Tobias Ospelt

Vendors

Affected products

Weakness enumeration

CWE-307: Improper Restriction of Excessive Authentication Attempts

CWE-287: Improper Authentication