Delta Electronics DIAEnergie Version 1.7.5 and prior may allow an attacker to retrieve passwords in cleartext due to a weak hashing algorithm.
The product generates a hash for a password, but it uses a scheme that does not provide a sufficient level of computational effort that would make password cracking attacks infeasible or expensive.
The product uses a broken or risky cryptographic algorithm or protocol.
Link | Tags |
---|---|
https://us-cert.cisa.gov/ics/advisories/icsa-21-238-03 | third party advisory us government resource |