Blink1Control2 2.2.7 - Weak Password Encryption

// Exploit Title: Blink1Control2 2.2.7 - Weak Password Encryption // Date: 2022-08-12 // Exploit Author: p1ckzi // Vendor Homepage: https://thingm.com/ // Software Link: https://github.com/todbot/Blink1Control2/releases/tag/v2.2.7 // Vulnerable Version: blink1control2 !/usr/bin/env node const...

Weak Encryption

Blink1Control2 contains weak encryption. The vulnerability exists in start function in server/skypeService.js because the passwords in event rules are not properly handled, allowing an attacker to access unauthorized information in the system...

Blink1Control2 uses weak password encryption

The Blink1Control2 application = 2.2.7 uses weak password encryption and an insecure method of storage. Version 2.2.9 fixes the issue...

Design/Logic Flaw

The Blink1Control2 application = 2.2.7 uses weak password encryption and an insecure method of storage...

CVE-2022-35513

The Blink1Control2 application = 2.2.7 uses weak password encryption and an insecure method of storage...

CVE-2022-35513

The Blink1Control2 application = 2.2.7 uses weak password encryption and an insecure method of storage...

PT-2022-22877 · Unknown · Blink1Control2

Name of the Vulnerable Software and Affected Versions: Blink1Control2 versions prior to 2.2.9 Description: The issue concerns the use of weak password encryption and an insecure method of storage in the Blink1Control2 application. Recommendations: For versions prior to 2.2.9, update to version...

PT-2022-24271 · Esri · Esri Portal For Arcgis

Name of the Vulnerable Software and Affected Versions: Esri Portal for ArcGIS version 10.8.1 Description: A system property in Esri Portal for ArcGIS is not properly encrypted, potentially allowing a local user to read sensitive information from a properties file. Recommendations: For Esri Portal...

Vulnerabilities fixed in apache OpenOffice

Apache Software Foundation has fixed vulnerabilities in OpenOffice. The vulnerabilities allow a malicious person with access to the system to retrieve user passwords stored in a user's configuration database. The vulnerabilities involve weak encryption on this configuration database. Apache has...

LibreOffice < 7.2.7 / 7.3 < 7.3.3 Multiple Vulnerabilities (macOS)

According to its self-reported version, the LibreOffice application running on the remote host is prior to 7.2.7 or 7.3.3. It is, therefore, affected by multiple vulnerabilities: - LibreOffice supports the storage of passwords for web connections in the user's configuration database. The stored...

The vulnerability of the microprogramming software in General Electric’s renewable energy iNET and iNET II hardware devices, related to insufficiently secure data encryption, allows a hacker to compromise the target system.

The vulnerability of the microprogramming software in General Electric’s renewable energy iNET and iNET II products is related to insufficiently secure data encryption. Exploiting this vulnerability could allow an attacker to compromise the target system...

Emerson OpenBSI 加密问题漏洞

Emerson OpenBSI is a set of web-based communication services designed for technicians, engineers, and operators from Emerson Electric USA that provide access to ControlWave RTUs. A security vulnerability exists in versions of Emerson OpenBSI prior to 2022-04-29 that stems from the use of weak...

IBM Security Verify Identity Manager 加密问题漏洞

IBM Security Verify Identity Manager is a security verification identity manager from IBM USA. A security vulnerability exists in IBM Security Verify Identity Manager version 10.0 that stems from the use of a weaker-than-expected encryption algorithm. An attacker could exploit the vulnerability t...

Exploit for Use of a Broken or Risky Cryptographic Algorithm in Blink1 Blink1Control2

blink1-pass-decrypt ⭐ poc and simple script designed for rever...

CVE-2017-20040

A vulnerability was found in SICUNET Access Controller 0.32-05z. It has been declared as problematic. This vulnerability affects unknown code of the component Password Storage. The manipulation leads to weak encryption. Attacking locally is a requirement...

CVE-2017-20040

A vulnerability was found in SICUNET Access Controller 0.32-05z. It has been declared as problematic. This vulnerability affects unknown code of the component Password Storage. The manipulation leads to weak encryption. Attacking locally is a requirement...

Design/Logic Flaw

A vulnerability was found in SICUNET Access Controller 0.32-05z. It has been declared as problematic. This vulnerability affects unknown code of the component Password Storage. The manipulation leads to weak encryption. Attacking locally is a requirement...

CVE-2017-20040 SICUNET Access Controller Password Storage cleartext storage

A vulnerability was found in SICUNET Access Controller 0.32-05z. It has been declared as problematic. This vulnerability affects unknown code of the component Password Storage. The manipulation leads to weak encryption. Attacking locally is a requirement...

CVE-2017-20040

The CVE-2017-20040 entry concerns SICUNET Access Controller 0.32-05z, specifically the Password Storage component. The vulnerability is described as enabling weak encryption due to manipulation of password storage, with exploitation requiring local access. No explicit exploit details, affected ve...

CVE-2017-20040 SICUNET Access Controller Password Storage cleartext storage

A vulnerability was found in SICUNET Access Controller 0.32-05z. It has been declared as problematic. This vulnerability affects unknown code of the component Password Storage. The manipulation leads to weak encryption. Attacking locally is a requirement...