CVE-2020-6780

Affected products: Bosch FSM-2500 server and Bosch FSM-5000 server (up to version 5.2). Root cause: use of a database password hash with insufficient computational effort (MD5), enabling credential disclosure. Impact: a remote attacker with admin privileges can dump other users’ credentials and m...

CVE-2020-6780 Password Hash With Insufficient Computational Effort in the Database of Bosch FSM-2500 Server and Bosch FSM-5000 Server

Use of Password Hash With Insufficient Computational Effort in the database of Bosch FSM-2500 server and Bosch FSM-5000 server up to and including version 5.2 allows a remote attacker with admin privileges to dump the credentials of other users and possibly recover their plain-text passwords by...