WellinTech KingView User Credentials Not Securely Hashed
This CSAF advisory was extracted from unstructured data and may contain inaccuracies. If you notice any errors, please reach out to the designated contact at CISA CSAF: central@cisa.dhs.gov
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2012-4899US | low2.1OT erhöht | — | ||
WellinTech KingView 6.5.3 and earlier uses a weak password-hashing algorithm, which makes it easier for local users to discover credentials by reading an unspecified file. | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- ICS Advisory ICSA-12-283-02 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-12-283-02 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (1)
- MitigationKingView
WellinTech has created a patch that fixes this vulnerability by increasing the complexity of the algorithm used to encrypt the passwords and usernames. A copy of the patch may be downloaded from the following location: (http://www.wellintech.com/index.php/news/33-patch-for-kingview653).
http://www.wellintech.com/index.php/news/33-patch-for-kingview653
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan