CVE-2026-65309 — Storage of passwords in a reversible format

CVE-2026-65309

Storage of passwords in a reversible format PUBLISHED

Description (CNA)

ANDRITZ HIPASE-250 (formerly 250 SCALA) in affected versions stores and transmits user passwords using a reversible format instead of a one-way password hash. This allows an attacker able to read the credential store or capture network traffic to recover all stored passwords.

Affected (CNA)

Vendor / product	Versions
ANDRITZ / HIPASE-250	affected 0 through 7.20; unaffected 7.50
ANDRITZ / 250 SCALA	affected 0 through 7.20; unaffected 7.50

CWE

CWE-327, CWE-257

References

https://www.andritz.com/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.