Vulnerabilities (CVE)

Filtered by vendor Gesslergmbh Subscribe
Filtered by product Web-master Firmware
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2024-1040 1 Gesslergmbh 2 Web-master, Web-master Firmware 2024-02-07 N/A 4.4 MEDIUM
Gessler GmbH WEB-MASTER user account is stored using a weak hashing algorithm. The attacker can restore the passwords by breaking the hashes stored on the device.
CVE-2024-1039 1 Gesslergmbh 2 Web-master, Web-master Firmware 2024-02-07 N/A 9.8 CRITICAL
Gessler GmbH WEB-MASTER has a restoration account that uses weak hard coded credentials and if exploited could allow an attacker control over the web management of the device.