Lucene search

K
nvd[email protected]NVD:CVE-2024-0556
HistoryJan 16, 2024 - 11:15 a.m.

CVE-2024-0556

2024-01-1611:15:08
CWE-261
web.nvd.nist.gov
weak cryptography
passwords
wic200
version 1.1
base64
plain text
cve-2024-0556

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

0.001 Low

EPSS

Percentile

31.0%

A Weak Cryptography for Passwords vulnerability has been detected on WIC200 affecting version 1.1. This vulnerability allows a remote user to intercept the traffic and retrieve the credentials from another user and decode it in base64 allowing the attacker to see the credentials in plain text.

Affected configurations

NVD
Node
xantechwic1200_firmwareMatch1.1
AND
xantechwic1200Match-

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

0.001 Low

EPSS

Percentile

31.0%

Related for NVD:CVE-2024-0556