Description
Computrols CBAS 18.0.0 mishandles password hashes. The approach is MD5 with a pw prefix, e.g., if the password is admin, it will calculate the MD5 hash of pwadmin and store it in a MySQL database.
Advisories 1
- ICSA-19-141-01 Computrols CBAS Web CISA ICS & IT advisories · May 21, 2019