CVE-2024-0676 Weak password requirement vulnerability in Lamassu Bitcoin ATM Douro machines

2024-01-3012:40:12

CWE-521

INCIBE

raw.githubusercontent.com

cve-2024-0676

lamassu bitcoin atm

douro machines

weak password requirement

vulnerability

local user

stored hashes

dictionary attack

4-character passwords

6.8 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.2%

JSON

Weak password requirement vulnerability

in Lamassu Bitcoin ATM Douro machines, in its 7.1 version

, which allows a local user to interact with the machine where the application is installed, retrieve stored hashes from the machine and crack long 4-character passwords using a dictionary attack.