Computrols CBAS 18.0.0 mishandles password hashes. The approach is MD5 with a pw prefix, e.g., if the password is admin, it will calculate the MD5 hash of pwadmin and store it in a MySQL database.
CPE | Name | Operator | Version |
---|---|---|---|
computrols_building_automation_software | le | 19.0.0 |