Description
The S2 Security NetBox 2.x and 3.x, as used in the Linear eMerge 50 and 5000 and the Sonitrol eAccess, uses a weak hash algorithm for storing the Administrator password, which makes it easier for context-dependent attackers to obtain privileged access by recovering the cleartext of this password.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- http://www.darkreading.com/blog/archives/2010/04/attacking_door.html ↗
- http://www.securityinfowatch.com/Executives+Columns+%2526+Features/1316527?pageNum=2 ↗
- http://www.slideshare.net/shawn_merdinger/we-dont-need-no-stinkin-badges-hacking-electronic-door-access-controllersquot-shawn-merdinger-carolinacon ↗
- https://exchange.xforce.ibmcloud.com/vulnerabilities/59827 ↗
- http://blip.tv/file/3414004 ↗