Description (CNA)
A CWE-760: Use of a One-Way Hash with a Predictable Salt vulnerability exists in Modicon M221 (all references, all versions), that could allow an attacker to pre-compute the hash value using dictionary attack technique such as rainbow tables, effectively disabling the protection that an unpredictable salt would provide.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / Modicon M221 (all references, all versions) | affected Modicon M221 (all references, all versions) |
CWE
CWE-760
References
- https://www.se.com/ww/en/download/document/SEVD-2020-315-05/
- https://us-cert.cisa.gov/ics/advisories/icsa-20-343-04
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.