PT-2026-95457 · Planet · Igs-5225-8P2T4S V2+1
CVSS v2.0
4.6
Medium
| Vector | AV:L/AC:L/Au:S/C:C/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
PLANET IGS-5225-8P2T4S V1 versions prior to 1.2412b260707
PLANET IGS-5225-8P2T4S V2 versions prior to 2.2412b260519
Description
The device uses MD5-based password hashing, a cryptographic algorithm with known weaknesses. An attacker who obtains the device configuration file can recover the privileged-mode access password.
Recommendations
Update PLANET IGS-5225-8P2T4S V1 to version 1.2412b260707 or later.
Update PLANET IGS-5225-8P2T4S V2 to version 2.2412b260519 or later.
Fix
Stack Overflow
Use of a Broken Cryptographic Algorithm
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Igs-5225-8P2T4S V1
Igs-5225-8P2T4S V2