| Titre | FNKvision FNK-GU2 Wireless IP Camera Firmware version 40.1.7 and prior Use of a Broken or Risky Cryptographic Algorithm (CWE-327) |
|---|
| Description | The FNKvision GU2 Wireless IP Camera stores the root account's password hash in the /etc/shadow file using the MD5-crypt algorithm. This is an outdated and cryptographically weak hashing algorithm that is susceptible to offline cracking. |
|---|
| La source | ⚠️ https://medium.com/@pundhapat/sqli-in-the-cloud-root-on-the-board-a-beginners-journey-into-iot-hacking-06efb2539a21 |
|---|
| Utilisateur | 0xHasta (UID 86257) |
|---|
| Soumission | 02/07/2025 20:26 (il y a 10 mois) |
|---|
| Modérer | 07/07/2025 15:19 (5 days later) |
|---|
| Statut | Accepté |
|---|
| Entrée VulDB | 315163 [FNKvision FNK-GU2 jusqu’à 40.1.7 MD5 /etc/shadow chiffrement faible] |
|---|
| Points | 16 |
|---|