Lucene search
HistoryFeb 01, 2024 - 10:15 p.m.
CVE-2024-1040
cve-2024-1040
gessler gmbh
weak hashing algorithm
password restoration
nvd
4.4 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
4.7 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
5.2%
Gessler GmbH WEB-MASTER user account is stored using a weak hashing algorithm. The attacker can restore the passwords by breaking the hashes stored on the device.
Affected configurations
Node
gesslergmbhweb-master_firmwareMatch7.9
gesslergmbhweb-masterMatch-
| CPE | Name | Operator | Version |
|---|---|---|---|
| gesslergmbh:web-master_firmware | gesslergmbh web-master firmware | eq | 7.9 |
CNA Affected
[
{
"defaultStatus": "unaffected",
"product": "WEB-MASTER",
"vendor": "Gessler GmbH",
"versions": [
{
"status": "affected",
"version": "7.9"
}
]
}
]Related
prion
prion
Design/Logic Flaw
2024-02-01 22:15:00
cvelist
cvelist
CVE-2024-1040 Use of weak hash in Gessler GmbH WEB-MASTER
2024-02-01 21:41:08
nvd
nvd
CVE-2024-1040
2024-02-01 22:15:55
ics
ics
Gessler GmbH WEB-MASTER
2024-02-01 12:00:00
4.4 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
4.7 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
5.2%
Related for CVE-2024-1040