Eos Security Vulnerabilities - CVSS Score 9 - 10

CVE-2023-0452

Econolite EOS versions prior to 3.2.23 use a weak hashalgorithm for encrypting privileged user credentials. A configuration file thatis accessible without authentication uses MD5 hashes for encryptingcredentials, including those of administrators and technicians.