CVE-2023-41611

Victure PC420 1.1.39 was discovered to use a weak and partially hardcoded key to encrypt data...

CVE-2023-41611

Victure PC420 1.1.39 was discovered to use a weak and partially hardcoded key to encrypt data...

PT-2024-12946

Name of the Vulnerable Software and Affected Versions Victure PC420 version 1.1.39 Description The issue is related to the use of a weak encryption key for the file enabled telnet.dat on the Micro SD card. Recommendations For Victure PC420 version 1.1.39, consider updating the encryption key for...

CVE-2023-41611

The Victure PC420 smart camera, specifically version 1.1.39 , is vulnerable due to the use of a weak and partially hardcoded key for data encryption. This flaw allows for potential unauthorized access to encrypted information. There is currently no information available regarding a newer version ...

CVE-2023-41612: Use of Hard-coded Credentials

Victure PC420 1.1.39 was discovered to use a weak encryption key for the file enabledtelnet.dat on the Micro SD card...

Dell InsightIQ 加密问题漏洞

Dell InsightIQ is a performance monitoring and reporting tool from Dell USA. Dell InsightIQ suffers from a cryptographic issue vulnerability that arises from the use of corrupt or risky encryption algorithms. An unauthenticated remote access attacker could exploit the vulnerability to cause...

CVE-2024-45394 Secret encryption vulnerable to brute-force attacks

Authenticator is a browser extension that generates two-step verification codes. In versions 7.0.0 and below, encryption keys for user data were stored encrypted at-rest using only AES-256 and the EVPBytesToKey KDF. Therefore, attackers with a copy of a user's data are able to brute-force the...

PT-2024-31598 · Unknown · Authenticator

Name of the Vulnerable Software and Affected Versions: Authenticator versions prior to 8.0.0 Description: The Authenticator browser extension generates two-step verification codes. In versions prior to 8.0.0, encryption keys for user data were stored encrypted at-rest using only AES-256 and the E...

PT-2024-19055 · Bmra · Bmra

Name of the Vulnerable Software and Affected Versions: BMRA software versions prior to 22.08 Description: The issue is related to inadequate encryption strength, which may allow an authenticated user to potentially enable escalation of privilege via local access. Recommendations: For versions pri...

PT-2024-19112 · Envoy · Envoy

Name of the Vulnerable Software and Affected Versions: Envoy versions 4.x through 5.x Description: The issue is related to inadequate encryption strength, allowing an authenticated attacker to execute arbitrary OS commands via encrypted package upload. Recommendations: For Envoy versions 4.x...

PT-2024-28997 · Changing Information Technology · Tcbservisign

Name of the Vulnerable Software and Affected Versions: CHANGING Information Technology TCBServiSign Windows Version affected versions not specified Description: The issue is related to the insufficient encryption strength of authorization keys. A remote attacker can exploit this by tricking a...

PT-2024-5766 · Unknown · Exacqvision Server +1

Name of the Vulnerable Software and Affected Versions: exacqVision Client and exacqVision Server affected versions not specified Description: The issue is related to insufficient key length and exchange in the communication between exacqVision Client and exacqVision Server, which may allow a remo...

The vulnerability of SIPROTEC relay protection devices, related to insufficiently secure data encryption, allows attackers to carry out “man-in-the-middle” attacks.

The vulnerability of SIPROTEC relay protection devices is related to insufficiently secure data encryption. Exploiting this vulnerability allows a malicious actor, operating remotely, to carry out “man-in-the-middle” attacks using specially crafted packets sent to port 4443/tcp...

The vulnerability of the TLS/SSL software component used for managing SAN networks in Brocade SANnav systems allows attackers to execute a type of “man-in-the-middle” attack.

The vulnerability of the TLS/SSL software components used for managing SAN networks in Brodage SANnav systems is related to insufficient encryption reliability. Exploiting this vulnerability could allow a remote attacker to carry out a “man-in-the-middle” attack and gain unauthorized access to...

IBM Datacap Navigator Encryption Issue Vulnerability

IBM Datacap Navigator is a Web client for Datacap from International Business Machines IBM. IBM Datacap Navigator suffers from a cryptographic issue vulnerability that stems from the use of a weaker-than-expected encryption algorithm, which could be exploited by an attacker to decrypt highly...

IBM Datacap Navigator 安全漏洞

IBM Datacap Navigator is a Web client for Datacap from International Business Machines IBM. IBM Datacap Navigator suffers from a cryptographic issue vulnerability that stems from the use of a weaker-than-expected encryption algorithm, which could be exploited by an attacker to decrypt highly...

Siemens SIPROTEC 5 devices weak encryption vulnerability

SIPROTEC 5 devices offer a range of integrated protection, control, measurement and automation functions for substations and other applications. A weak cryptography vulnerability exists in Siemens SIPROTEC 5 devices due to affected devices supporting weak cryptography on multiple ports 443/tcp fo...

PT-2024-6690 · Advantech · Adam-5630

Name of the Vulnerable Software and Affected Versions: Advantech ADAM-5630 affected versions not specified Description: The issue is related to the transmission of user credentials in plain text between the device and the user source device during the login process. This is due to the use of weak...

Dell PowerProtect Data Domain Weak Encryption Algorithm Vulnerability

Dell PowerProtect Data Domain is a suite of hardware appliances for data protection, backup, storage, and deduplication from Dell USA. A weak cryptographic algorithm vulnerability exists in Dell PowerProtect Data Domain, which could be exploited by an attacker to cause a man-in-the-middle attack,...

CVE-2024-36496 Hardcoded Credentials

The configuration file is encrypted with a static key derived from a static five-character password which allows an attacker to decrypt this file. The application hashes this five-character password with the outdated and broken MD5 algorithm no salt and uses the first five bytes as the key for RC...