CVE-2023-0452

Econolite / EOS PUBLISHED

Description (CNA)

Econolite EOS versions prior to 3.2.23 use a weak hash algorithm for encrypting privileged user credentials. A configuration file that is accessible without authentication uses MD5 hashes for encrypting credentials, including those of administrators and technicians.

Affected (CNA)

Vendor / product	Versions
Econolite / EOS	affected 0 before 3.2.23

CWE

CWE-328

References

https://www.cisa.gov/uscert/ics/advisories/icsa-23-026-02

ADP enrichment

CVE

No English description supplied.

https://www.cisa.gov/uscert/ics/advisories/icsa-23-026-02

CISA-ADP

No English description supplied.

No references supplied.