Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-9h67-gqh5-w6f6

Опубликовано: 25 фев. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7.8

Описание

The DeskLock tool provided with FactoryTalk View SE uses a weak encryption algorithm that may allow a local, authenticated attacker to decipher user credentials, including the Windows user or Windows DeskLock passwords. If the compromised user has an administrative account, an attacker could gain full access to the user’s operating system and certain components of FactoryTalk View SE.

The DeskLock tool provided with FactoryTalk View SE uses a weak encryption algorithm that may allow a local, authenticated attacker to decipher user credentials, including the Windows user or Windows DeskLock passwords. If the compromised user has an administrative account, an attacker could gain full access to the user’s operating system and certain components of FactoryTalk View SE.

EPSS

Процентиль: 2%
0.00015
Низкий

7.8 High

CVSS3

Дефекты

CWE-261
CWE-326

Связанные уязвимости

CVSS3: 7.8
nvd
почти 4 года назад

The DeskLock tool provided with FactoryTalk View SE uses a weak encryption algorithm that may allow a local, authenticated attacker to decipher user credentials, including the Windows user or Windows DeskLock passwords. If the compromised user has an administrative account, an attacker could gain full access to the user’s operating system and certain components of FactoryTalk View SE.

EPSS

Процентиль: 2%
0.00015
Низкий

7.8 High

CVSS3

Дефекты

CWE-261
CWE-326