Code injection

2023-07-0320:15:00

PRIOn knowledge base

www.prio-n.com

code injection

hashed passwords

md5 encryption

insecure algorithm

nvd

6.7 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

18.2%

JSON

The affected TBox RTUs store hashed passwords using MD5 encryption, which is an insecure encryption algorithm.

CPENameOperatorVersion
tbox_lt2_firmwarege1.46
tbox_lt2_firmwarele1.50.598
tbox_ms-cpu32-s2_firmwarege1.46
tbox_ms-cpu32-s2_firmwarele1.50.598
tbox_ms-cpu32_firmwarege1.46
tbox_ms-cpu32_firmwarele1.50.598
tbox_rm2_firmwarege1.46
tbox_rm2_firmwarele1.50.598
tbox_tg2_firmwarege1.46
tbox_tg2_firmwarele1.50.598

Name	Operator	Version
tbox_lt2_firmware	ge	1.46
tbox_lt2_firmware	le	1.50.598
tbox_ms-cpu32-s2_firmware	ge	1.46
tbox_ms-cpu32-s2_firmware	le	1.50.598
tbox_ms-cpu32_firmware	ge	1.46
tbox_ms-cpu32_firmware	le	1.50.598
tbox_rm2_firmware	ge	1.46
tbox_rm2_firmware	le	1.50.598
tbox_tg2_firmware	ge	1.46
tbox_tg2_firmware	le	1.50.598

References

www.cisa.gov/news-events/ics-advisories/icsa-23-180-03