IcscertCVELIST:CVE-2024-5434CVE-2024-5434 Weak Encoding for Password vulnerability in Campbell Scientific CSI Web Server and RTMC
6.9 Medium
CVSS4
Attack Vector
ADJACENT
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:H/SC:N/VI:N/SI:N/VA:N/SA:N
6.7 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
9.1%
The Campbell Scientific CSI Web Server stores web authentication credentials in a file with a specific file name. Passwords within that file are stored in a weakly encoded format. There is no known way to remotely access the file unless it has been manually renamed. However, if an attacker were to gain access to the file, passwords could be decoded and reused to gain access.
CNA Affected
[
{
"defaultStatus": "unaffected",
"product": "CSI Web Server and RTMC",
"vendor": "Campbell Scientific",
"versions": [
{
"status": "affected",
"version": "CSI Web Server 1.6"
},
{
"status": "affected",
"version": "RTMC 5.0"
}
]
}
]Related
6.9 Medium
CVSS4
Attack Vector
ADJACENT
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:H/SC:N/VI:N/SI:N/VA:N/SA:N
6.7 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
9.1%