CVE-2002-1975

Опубликовано: 31 дек. 2002

Источник: nvd

CVSS3: 5.5

CVSS2: 2.1

EPSS Низкий

Описание

Sharp Zaurus PDA SL-5000D and SL-5500 uses a salt of "A0" to encrypt the screen-locking password as stored in the Security.conf file, which makes it easier for local users to guess the password via brute force methods.

Ссылки

http://online.securityfocus.com/archive/1/281437
Broken Link
Third Party Advisory
VDB Entry
http://www.iss.net/security_center/static/9535.php
Broken Link
http://www.securityfocus.com/bid/5201
Broken Link
Third Party Advisory
VDB Entry
http://online.securityfocus.com/archive/1/281437
Broken Link
Third Party Advisory
VDB Entry
http://www.iss.net/security_center/static/9535.php
Broken Link
http://www.securityfocus.com/bid/5201
Broken Link
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:sharp:zaurus_sl-5000d_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:sharp:zaurus_sl-5000d:-:*:*:*:*:*:*:*

Конфигурация 2

Одновременно

cpe:2.3:o:sharp:zaurus_sl-5500_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:sharp:zaurus_sl-5500:-:*:*:*:*:*:*:*

EPSS

Процентиль: 20%

0.00064

Низкий

5.5 Medium

CVSS3

2.1 Low

CVSS2

Дефекты

CWE-326

Связанные уязвимости

GHSA-6wjf-4887-cj22