← CVE Intelligence

CVE-2020-6780

Password Hash With Insufficient Computational Effort in the Database of Bosch FSM-2500 Server and Bosch FSM-5000 Server PUBLISHED

Description (CNA)

Use of Password Hash With Insufficient Computational Effort in the database of Bosch FSM-2500 server and Bosch FSM-5000 server up to and including version 5.2 allows a remote attacker with admin privileges to dump the credentials of other users and possibly recover their plain-text passwords by brute-forcing the MD5 hash.

Affected (CNA)

Vendor / productVersions
Bosch / FSM-2500affected unspecified through 5.2
Bosch / FSM-5000affected unspecified through 5.2

CWE

CWE-916

References

ADP enrichment

CVE

No English description supplied.