CVE-2017-20040

Summary

A vulnerability was found in SICUNET Access Controller 0.32-05z. It has been declared as problematic. This vulnerability affects unknown code of the component Password Storage. The manipulation leads to weak encryption. Attacking locally is a requirement.

Affected Software

Weaknesses

• CWE-312: CWE-312 Cleartext Storage of Sensitive Information

ADP Enrichment

CVE Program Container

Additional References

• http://seclists.org/fulldisclosure/2017/Mar/25
• https://vuldb.com/?id.98908

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: partial

References

• http://seclists.org/fulldisclosure/2017/Mar/25
• https://vuldb.com/?id.98908

• ←Previous
• Next→