CVE-2012-4899

2022-10-0316:15:33

mitre

www.cve.org

wellintech kingview

weak password

hashing algorithm

local users

credentials

unspecified file

6.3 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

0.4%

JSON

WellinTech KingView 6.5.3 and earlier uses a weak password-hashing algorithm, which makes it easier for local users to discover credentials by reading an unspecified file.

References

www.us-cert.gov/control_systems/pdf/ICSA-12-283-02.pdf

www.wellintech.com/index.php/news/33-patch-for-kingview653