CVE-2024-13026CWE-326

Inadequate Encryption Strength Vulnerability in Roche Algo Edge

Medium · published January 17, 2025

CVSS v4.0
6.1
EPSS
0%
Percentile
2.1
In the wild
Unconfirmed
What it is

A vulnerability exists in Algo Edge up to 2.1.1 - a previously used (legacy) component of navify® Algorithm Suite. The vulnerability impacts the authentication mechanism of this component and could allow an attacker with adjacent access to the laboratory network and the Algo Edge system to craft valid authentication tokens and access the component. Other components of navify® Algorithm Suite are not affected.

The record
Technical detail
CVSS v4.0
6.1 · MEDIUM
Vector
CVSS:4.0/AV:A/AC:H/AT:P/PR:N/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N/S:N/AU:N/R:A/V:D/RE:L/U:Clear
EPSS
0.00127 · 2.1th percentile
Weakness
CWE-326 · Inadequate Encryption Strength
Published
2025-01-17T20:02Z
EPSS history
Timeline
  • 17 JAN 20:02Z
    Inadequate Encryption Strength Vulnerability in Roche Algo Edge
    cvelistv5