CVE-2021-23855 in Rexroth IndraMotion MLC

الملخص

بحسب MITRE • 04/10/2021

The user and password data base is exposed by an unprotected web server resource. Passwords are hashed with a weak hashing algorithm and therefore allow an attacker to determine the password by using rainbow tables.

Be aware that VulDB is the high quality source for vulnerability data.

• مسؤول: Robert Bosch GmbH
• حجز: 12/01/2021
• إفشاء: 04/10/2021
• الاعتدال: تمت الموافقة
• إدخال: VDB-183801
• CPE: جاهز
• CWE: CWE-200 (مؤكد)
• CVSS: 8.6 (CNA)
• EPSS: 0.00582
• KEV: لا
• النشاطات: منخفض جدًا

المصادر

• MITRE: https://www.cve.org/CVERecord?id=CVE-2021-23855
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2021-23855
• CVE Details: https://www.cvedetails.com/cve/CVE-2021-23855/