Description
ANDRITZ HIPASE-250 (formerly 250 SCALA) in affected versions stores
and transmits user passwords using a reversible format instead of a
one-way password hash. This allows an attacker able to read the
credential store or capture network traffic to recover all stored
passwords.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| ANDRITZ | HIPASE-250 | ≤ 7.20 | 7.50 |
| ANDRITZ | 250 SCALA | ≤ 7.20 | 7.50 |
Advisories 1
- ICSA-26-225-05 ANDRITZ HIPASE-250 and 250 SCALA CISA ICS & IT advisories · Aug 13, 2026