Описание
MMP: All versions prior to v1.0.3, PTP C-series: Device versions prior to v2.8.6.1, and PTMP C-series and A5x: Device versions prior to v2.5.4.1 uses the MD5 algorithm to hash the passwords before storing them but does not salt the hash. As a result, attackers may be able to crack the hashed passwords.
Ссылки
- Third Party AdvisoryUS Government Resource
- Third Party AdvisoryUS Government Resource
Уязвимые конфигурации
Конфигурация 1Версия до 1.0.3 (исключая)
cpe:2.3:a:airspan:mimosa_management_platform:*:*:*:*:*:*:*:*
Конфигурация 2Версия до 2.8.6.1 (исключая)
Одновременно
cpe:2.3:o:airspan:c6x_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:airspan:c6x:-:*:*:*:*:*:*:*
Конфигурация 3Версия до 2.8.6.1 (исключая)
Одновременно
cpe:2.3:o:airspan:c5x_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:airspan:c5x:-:*:*:*:*:*:*:*
Конфигурация 4Версия до 2.8.6.1 (исключая)
Одновременно
cpe:2.3:o:airspan:c5c_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:airspan:c5c:-:*:*:*:*:*:*:*
Конфигурация 5Версия до 2.5.4.1 (исключая)
Одновременно
cpe:2.3:o:airspan:a5x_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:airspan:a5x:-:*:*:*:*:*:*:*
EPSS
Процентиль: 23%
0.00077
Низкий
6.5 Medium
CVSS3
4 Medium
CVSS2
Дефекты
CWE-327
CWE-326
Связанные уязвимости
CVSS3: 6.5
github
почти 4 года назад
MMP: All versions prior to v1.0.3, PTP C-series: Device versions prior to v2.8.6.1, and PTMP C-series and A5x: Device versions prior to v2.5.4.1 uses the MD5 algorithm to hash the passwords before storing them but does not salt the hash. As a result, attackers may be able to crack the hashed passwords.
EPSS
Процентиль: 23%
0.00077
Низкий
6.5 Medium
CVSS3
4 Medium
CVSS2
Дефекты
CWE-327
CWE-326