CVE-2021-43989CWE-916

mySCADA myPRO

High · published December 23, 2021

CVSS v3.1
7.5
EPSS
1%
Percentile
52.3
In the wild
Unconfirmed
What it is

mySCADA myPRO Versions 8.20.0 and prior stores passwords using MD5, which may allow an attacker to crack the previously retrieved password hashes.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00692 · 52.3th percentile
Weakness
CWE-916 · Use of Password Hash With Insufficient Computational Effort
Published
2021-12-23T19:48Z
EPSS history
Timeline
  • 23 DEC 19:48Z
    mySCADA myPRO
    cvelistv5