CVE-2021-43989
23.12.2021, 20:15
mySCADA myPRO Versions 8.20.0 and prior stores passwords using MD5, which may allow an attacker to crack the previously retrieved password hashes.Enginsight
| Vendor | Product | Version |
|---|---|---|
| myscada | mypro | 𝑥 ≤ 8.20.0 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
- CWE-916 - Use of Password Hash With Insufficient Computational EffortThe software generates a hash for a password, but it uses a scheme that does not provide a sufficient level of computational effort that would make password cracking attacks infeasible or expensive.
- CWE-327 - Use of a Broken or Risky Cryptographic AlgorithmThe use of a broken or risky cryptographic algorithm is an unnecessary risk that may result in the exposure of sensitive information.