Description
Econolite EOS versions prior to 3.2.23 use a weak hash
algorithm for encrypting privileged user credentials. A configuration file that
is accessible without authentication uses MD5 hashes for encrypting
credentials, including those of administrators and technicians.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Econolite | EOS | < 3.2.23 | 3.2.23 |
Advisories 1
- ICSA-23-026-02 Econolite EOS (Update A) CISA ICS & IT advisories · Jun 22, 2023
References
- https://www.cisa.gov/uscert/ics/advisories/icsa-23-026-02 government-resource