CVE-2023-6728

Nokia SR OS bof.cfg file encryption is vulnerable to a brute force attack. This weakness allows an attacker in possession of the encrypted file to decrypt the bof.cfg file and obtain the BOF configuration content...

CVE-2023-6728

CVE-2023-6728 affects Nokia SR OS where the bof.cfg file encryption is vulnerable to brute-force access. In affected SR OS, an attacker who obtains the encrypted bof.cfg can decrypt it to retrieve BOF configuration content. Public descriptions across Red Hat, NVD, CVE listings, CVE records, and C...

CVE-2024-36497 Unhashed Storage of Password

The decrypted configuration file contains the password in cleartext which is used to configure WINSelect. It can be used to remove the existing restrictions and disable WINSelect entirely...