CWE-760 Archives - CVE Vulnerability https://cvevulnerability.com/cwe_categories/cwe-760/ Sun, 26 Feb 2023 06:40:36 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png CWE-760 Archives - CVE Vulnerability https://cvevulnerability.com/cwe_categories/cwe-760/ 32 32 CVE-2020-28214 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-28214/ Sun, 26 Feb 2023 06:40:36 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-28214/ A CWE-760: Use of a One-Way Hash with a Predictable Salt vulnerability exists in Modicon M221 (all references, all versions), that could allow an attacker to pre-compute the hash value using dictionary attack technique such as rainbow tables, effectively disabling the protection that an unpredictable salt would provide.

The post CVE-2020-28214 appeared first on CVE Vulnerability.

]]> A CWE-760: Use of a One-Way Hash with a Predictable Salt vulnerability exists in Modicon M221 (all references, all versions), that could allow an attacker to pre-compute the hash value using dictionary attack technique such as rainbow tables, effectively disabling the protection that an unpredictable salt would provide.

The post CVE-2020-28214 appeared first on CVE Vulnerability.

]]> CVE-2023-22599 https://cvevulnerability.com/cve_vulnerabilities/cve-2023-22599/ Wed, 22 Feb 2023 14:02:23 +0000 http://www.cvevulnerability.com/?cve_vulnerabilities=cve-2023-22599 InHand Networks InRouter 302, prior to version IR302 V3.5.56, and InRouter 615, prior to version InRouter6XX-S-V2.3.0.r5542, contain vulnerability CWE-760: Use of a One-way Hash with a Predictable Salt. They send MQTT credentials in response to HTTP/HTTPS requests from the cloud platform. These credentials are encoded using a hardcoded string into an MD5 hash. This string […]

The post CVE-2023-22599 appeared first on CVE Vulnerability.

]]> InHand Networks InRouter 302, prior to version IR302 V3.5.56, and InRouter 615, prior to version InRouter6XX-S-V2.3.0.r5542, contain vulnerability CWE-760: Use of a One-way Hash with a Predictable Salt. They send MQTT credentials in response to HTTP/HTTPS requests from the cloud platform. These credentials are encoded using a hardcoded string into an MD5 hash. This string could be easily calculated by an unauthorized user who spoofed sending an HTTP/HTTPS request to the devices. This could result in the affected devices being temporarily disconnected from the cloud platform and allow the user to receive MQTT commands with potentially sensitive information.

The post CVE-2023-22599 appeared first on CVE Vulnerability.

]]>