4.3
CVE-2022-29731
- EPSS 0.39%
- Veröffentlicht 02.06.2022 14:15:50
- Zuletzt bearbeitet 21.11.2024 06:59:37
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginAn access control issue in ICT Protege GX/WX 2.08 allows attackers to leak SHA1 password hashes of other users.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ict ≫ Protege Gx Firmware Version2.08
Ict ≫ Protege Wx Firmware Version2.08
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.39% | 0.308 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 4.3 | 2.8 | 1.4 |
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
|
| nvd@nist.gov | 4 | 8 | 2.9 |
AV:N/AC:L/Au:S/C:P/I:N/A:N
|
CWE-916 Use of Password Hash With Insufficient Computational Effort
The product generates a hash for a password, but it uses a scheme that does not provide a sufficient level of computational effort that would make password cracking attacks infeasible or expensive.
https://www.ict.co/
https://www.zeroscience.mk/en/vulnerabilities/ZSL-2022-5700.php