2007 matches found
Contec CONPROSYS IoT Gateway 加密问题漏洞
Contec CONPROSYS IoT Gateway is an IoT gateway software from Contec Japan. Contec CONPROSYS IoT Gateway suffers from a security vulnerability that stems from insufficient encryption strength, which can be exploited by an authenticated attacker to cause a denial of service DoS and execute arbitrar...
CLSA-2023-1678820835 samba: Fix of CVE-2022-38023
CVE-2022-38023: avoid weak rc4-hmac encryption algorithm for the Netlogon RPC...
CLSA-2023-1678820588 samba: Fix of CVE-2022-38023
CVE-2022-38023: avoid weak rc4-hmac encryption algorithm for the Netlogon RPC...
PT-2023-1940
Name of the Vulnerable Software and Affected Versions Adobe Experience Manager versions 6.5.15.0 and earlier Description The issue is related to the use of a weak encryption mechanism in Adobe Experience Manager, which can be exploited by a remote attacker to disclose protected information. A...
Hardcoded credentials
Akuvox E11 uses a weak encryption algorithm for stored passwords and uses a hard-coded password for decryption which could allow the encrypted passwords to be decrypted from the configuration file...
CVE-2023-0353 CVE-2023-0353
Akuvox E11 uses a weak encryption algorithm for stored passwords and uses a hard-coded password for decryption which could allow the encrypted passwords to be decrypted from the configuration file...
CVE-2023-0353 CVE-2023-0353
Akuvox E11 uses a weak encryption algorithm for stored passwords and uses a hard-coded password for decryption which could allow the encrypted passwords to be decrypted from the configuration file...
CVE-2023-0353
The connected documentation confirms CVE-2023-0353 affects Akuvox E11. The vulnerability arises from storing passwords with a weak encryption algorithm and decrypting them via a hard-coded key, enabling potential decryption of encrypted passwords from the device configuration. Impact is rated hig...
PT-2023-16205
Name of the Vulnerable Software and Affected Versions Akuvox E11 affected versions not specified Description The issue concerns the use of a weak encryption algorithm for stored passwords and a hard-coded password for decryption. This could allow the encrypted passwords to be decrypted from the...
CVE-2023-0353: Undefined Security Weakness
Akuvox E11 uses a weak encryption algorithm for stored passwords and uses a hard-coded password for decryption which could allow the encrypted passwords to be decrypted from the configuration file...
Akuvox E11 安全漏洞
Akuvox E11 is a SIP visual doorbell from Akuvox designed for villas, houses and apartments. A security vulnerability exists in Akuvox E11 that stems from Akuvox E11 using a weak encryption algorithm for stored passwords and decrypting them using hard-coded passwords, which can allow decryption of...
samba: RC4/HMAC-MD5 NetLogon Secure Channel is weak and should be avoided
A flaw was found in samba. The Netlogon RPC implementations may use the rc4-hmac encryption algorithm, which is considered weak and should be avoided even if the client supports more modern encryption types. This issue could allow an attacker who knows the plain text content communicated between...
CVE-2022-45141
Since the Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability was disclosed by Microsoft on Nov 8 2022 and per RFC8429 it is assumed that rc4-hmac is weak, Vulnerable Samba Active Directory DCs will issue rc4-hmac encrypted tickets despite the target server supporting better encryption...
CVE-2022-45141
Since the Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability was disclosed by Microsoft on Nov 8 2022 and per RFC8429 it is assumed that rc4-hmac is weak, Vulnerable Samba Active Directory DCs will issue rc4-hmac encrypted tickets despite the target server supporting better encryption...
samba: RC4/HMAC-MD5 NetLogon Secure Channel is weak and should be avoided
A flaw was found in samba. The Netlogon RPC implementations may use the rc4-hmac encryption algorithm, which is considered weak and should be avoided even if the client supports more modern encryption types. This issue could allow an attacker who knows the plain text content communicated between...
SUSE CVE-2012-2130
A Security Bypass vulnerability exists in PolarSSL 0.99pre4 through 1.1.1 due to a weak encryption error when generating Diffie-Hellman values and RSA keys...
SUSE CVE-2013-4134
OpenAFS before 1.4.15, 1.6.x before 1.6.5, and 1.7.x before 1.7.26 uses weak encryption DES for Kerberos keys, which makes it easier for remote attackers to obtain the service key...
SUSE CVE-2016-2379
The Mxit protocol uses weak encryption when encrypting user passwords, which might allow attackers to 1 decrypt hashed passwords by leveraging knowledge of client registration codes or 2 gain login access by eavesdropping on login messages and re-using the hashed passwords...