Description (CNA)
An insufficient entropy vulnerability exists in the salt generation functionality of WWBN AVideo dev master commit 15fed957fb. A specially crafted series of HTTP requests can lead to privilege escalation. An attacker can gather system information via HTTP requests and brute force the salt offline, leading to forging a legitimate password recovery code for the admin user.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| WWBN / AVideo | affected dev master commit 15fed957fb |
CWE
CWE-331
References
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.