CVE-2024-0556CWE-261

Weak Cryptography for Passwords vulnerability on WIC1200

High · published January 16, 2024

CVSS v3.1
7.1
EPSS
0%
Percentile
34.5
In the wild
Unconfirmed
What it is

A Weak Cryptography for Passwords vulnerability has been detected on WIC200 affecting version 1.1. This vulnerability allows a remote user to intercept the traffic and retrieve the credentials from another user and decode it in base64 allowing the attacker to see the credentials in plain text.

The record
Technical detail
CVSS v3.1
7.1 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00413 · 34.5th percentile
Weakness
CWE-261 · Weak Encoding for Password
Published
2024-01-16T10:10Z
EPSS history
Timeline
  • 16 JAN 10:10Z
    Weak Cryptography for Passwords vulnerability on WIC1200
    cvelistv5