Overview
- Description
- A Weak Cryptography for Passwords vulnerability has been detected on WIC200 affecting version 1.1. This vulnerability allows a remote user to intercept the traffic and retrieve the credentials from another user and decode it in base64 allowing the attacker to see the credentials in plain text.
- Source
- cve-coordination@incibe.es
- NVD status
- Modified
Risk scores
CVSS 3.1
- Type
- Primary
- Base score
- 6.5
- Impact score
- 3.6
- Exploitability score
- 2.8
- Vector string
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
- Severity
- MEDIUM
Weaknesses
- cve-coordination@incibe.es
- CWE-261
Social media
- Hype score
- Not currently trending
Configurations
[ { "nodes": [ { "negate": false, "cpeMatch": [ { "criteria": "cpe:2.3:o:xantech:wic1200_firmware:1.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "27A5FA72-8BA5-4BE7-89D2-8D85C1554A8A" } ], "operator": "OR" }, { "negate": false, "cpeMatch": [ { "criteria": "cpe:2.3:h:xantech:wic1200:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "04CACDA7-1954-4FDE-998A-E5675B65787F" } ], "operator": "OR" } ], "operator": "AND" } ]