CVE-2020-12069

Katalog CVE

CVSS 7.8 · High EPSS 0,17%

Kerentanan Use of Password Hash With Insufficient Computational Effort pada pilz pmc, codesys control for beaglebone +55 lainnya. Skor CVSS 3.1 7.8 (High) menurut NVD.

Deskripsi (NVD)

In CODESYS V3 products in all versions prior V3.5.16.0 containing the CmpUserMgr, the CODESYS Control runtime system stores the online communication passwords using a weak hashing algorithm. This can be used by a local attacker with low privileges to gain full control of the device.

Rincian

Terbit di NVD

26 Desember 2022

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

7.8 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-916: Use of Password Hash With Insufficient Computational Effort

EPSS (30 hari)

0,17% peluang dieksploitasi; lebih tinggi dari 6,0% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD. Ditampilkan 60 dari 67 konfigurasi; daftar lengkap ada di NVD.

Referensi dan perbaikan

• https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=12943&token=d097958a67ba382de688916f77e3013c0802fad... advisory vendor
• https://cert.vde.com/en/advisories/VDE-2021-061/ advisory pihak ketiga
• https://cert.vde.com/en/advisories/VDE-2022-022/ advisory pihak ketiga
• https://cert.vde.com/en/advisories/VDE-2022-031/ advisory pihak ketiga