CVE-2016-9353

An issue was discovered in Advantech SUISAccess Server Version 3.0 and prior. The admin password is stored in the system and is encrypted with a static key hard-coded in the program. Attackers could reverse the admin account password for use...

CVE-2016-9353

CVE-2016-9353 affects Advantech SUSIAccess Server (3.0 and earlier). The admin password is stored on the system and encrypted with a static, hard-coded key, enabling reverse retrieval and misuse of the admin account. ZDI/ZDI-adjacent disclosures describe a local privilege/escalation path leveragi...