Vulnerability · Published Jan 16, 2024 · Assigned by INCIBE
CVE-2024-0556Weak Cryptography for Passwords vulnerability on WIC1200
High 7.1
In plain English
A high-severity security flaw in WIC1200 from Full Compass Systems. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 36% of all known vulnerabilities).
Severity (CVSS 3.1)7.1High
Exploit odds (30 days)0.4%top 64.1% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
A Weak Cryptography for Passwords vulnerability has been detected on WIC200 affecting version 1.1. This vulnerability allows a remote user to intercept the traffic and retrieve the credentials from another user and decode it in base64 allowing the attacker to see the credentials in plain text.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Full Compass Systems | WIC1200 | 1.1 |
Weakness: CWE-261 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N