CVE-2023-31412

The LMS5xx uses weak hash generation methods, resulting in the creation of insecure hashs

High · published August 24, 2023

CVSS v3.1
7.5
EPSS
0%
Percentile
35.7
In the wild
Unconfirmed
What it is

The LMS5xx uses weak hash generation methods, resulting in the creation of insecure hashs. If an attacker manages to retrieve the hash, it could lead to collision attacks and the potential retrieval of the password.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00424 · 35.7th percentile
Published
2023-08-24T18:15Z
EPSS history
Timeline
  • 24 AUG 18:15Z
    The LMS5xx uses weak hash generation methods, resulting in the creation of insecure hashs
    cvelistv5