CVE-2024-36440

MEDIUM Year: 2024
CVSS v3 Score
6.8
Medium
Weakness Type
CWE-327
View all →

Vulnerability Description

An issue was discovered on Swissphone DiCal-RED 4009 devices. An attacker with access to the file /etc/deviceconfig may recover the administrative device password via password-cracking methods, because unsalted MD5 is used.

Related Vulnerabilities

CVE-2020-28498

MEDIUM
CVSS:6.8(Medium)

The package elliptic before 6.5.4 are vulnerable to Cryptographic Issues via the secp256k1 implementation in elliptic/ec/key.js. There is no check to confirm that the public key point passed into the ...

CWE-3272020

CVE-2021-20419

MEDIUM
CVSS:6.8(Medium)

IBM Security Guardium 11.2 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 196280.

CWE-3272021

CVE-2022-30111

MEDIUM
CVSS:6.8(Medium)

Due to the use of an insecure algorithm for rolling codes in MCK Smartlock 1.0, allows attackers to unlock the mechanism via replay attacks.

CWE-3272022

CVE-2023-32043

MEDIUM
CVSS:6.8(Medium)

Windows Remote Desktop Security Feature Bypass Vulnerability

CWE-3272023

CVE-2024-5559

MEDIUM
CVSS:6.8(Medium)

CWE-327: Use of a Broken or Risky Cryptographic Algorithm vulnerability exists that could cause denial of service, device reboot, or an attacker gaining full control of the relay when a specially craf...

CWE-3272024

CVE-2019-0030

MEDIUM
CVSS:6.7(Medium)

Juniper ATP uses DES and a hardcoded salt for password hashing, allowing for trivial de-hashing of the password file contents. This issue affects Juniper ATP 5.0 versions prior to 5.0.3.

CWE-3272019