Skip to content
OpenAdvisories
Medium · 6.5 CVE-2024-23580 EUVD-2024-21075

HCL DRYiCE Optibot Reset Station is impacted by insecure encryption of One-Time Passwords (OTPs)

Published May 28, 2024 · Updated Aug 1, 2024 · Assigned by HCL

Description

HCL DRYiCE Optibot Reset Station is impacted by insecure encryption of One-Time Passwords (OTPs). This could allow an attacker with access to the database to recover some or all encrypted values.

Affected products

VendorProductAffectedFixed
HCL Software DRYiCE Optibot Reset Station 1.0, 2.0 —

References