CVE-2024-0556 HIGH

CVE-2024-0556: Weak Cryptography for Passwords vulnerability on WIC1200

Vendor Full Compass Systems
Product WIC1200
Weakness CWE-261
Published January 16, 2024
Last update November 13, 2024

CVSS base score

7.1/10
Attack vector Network
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality High
Integrity Low

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N

What the vulnerability does

01Description

A Weak Cryptography for Passwords vulnerability has been detected on WIC200 affecting version 1.1. This vulnerability allows a remote user to intercept the traffic and retrieve the credentials from another user and decode it in base64 allowing the attacker to see the credentials in plain text.

Key dates

02Disclosure timeline

January 16, 2024 CVE published
November 13, 2024 Record updated