Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2023-0452

Econolite EOS versions prior to 3.2.23 use a weak hash

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
icscert

Description

Econolite EOS versions prior to 3.2.23 use a weak hash algorithm for encrypting privileged user credentials. A configuration file that is accessible without authentication uses MD5 hashes for encrypting credentials, including those of administrators and technicians.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Econolite EOS

Default version status: unaffected

  • 0 to < 3.2.23affected

References