2.8low
CVE-2016-4511
ABB PCM600 before 2.7 uses an improper hash algorithm for the main application password, which makes it easier for local users to obtain se…
Published 10 y ago · modified 4 mo ago · JSON
CVSS
2.8
v3.0 · NVD
CISA KEV
No
not known exploited
EPSS
0.3%
percentile 23%
Public exploits
0
none known
Summary
ABB PCM600 before 2.7 uses an improper hash algorithm for the main application password, which makes it easier for local users to obtain sensitive cleartext information by leveraging read access to the ACTConfig configuration file.
Exploit prediction (EPSS)
0.30% probability of exploitation in the next 30 days, higher than 23% of all scored CVEs.
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| NVD | 3.0 | 2.8 | CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N |
| NVD | 2.0 | 1.9 | AV:L/AC:M/Au:N/C:P/I:N/A:N |
Classification
- Weakness
- CWE-310 Cryptographic Issues
References
- ics-cert.us-cert.gov /advisories/ICSA-16-152-02 · x_refsource_MISC, x_transferred
Sources
- CVE List: CVE-2016-4511
- NVD: CVE-2016-4511
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.