Vulnerabilities (CVE)

Filtered by CWE-328
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2024-1040 1 Gesslergmbh 2 Web-master, Web-master Firmware 2024-02-07 N/A 4.4 MEDIUM
Gessler GmbH WEB-MASTER user account is stored using a weak hashing algorithm. The attacker can restore the passwords by breaking the hashes stored on the device.
CVE-2023-0452 1 Econolite 1 Eos 2023-12-10 N/A 5.3 MEDIUM
Econolite EOS versions prior to 3.2.23 use a weak hash algorithm for encrypting privileged user credentials. A configuration file that is accessible without authentication uses MD5 hashes for encrypting credentials, including those of administrators and technicians.