EEconolite

Products

Exploited and recent CVEs

• CVE-2023-0452 Critical 9.8 Econolite EOS versions prior to 3.2.23 use a weak hash algorithm for encrypting privileged user credentials. A configuration file that is accessible without authentication uses MD5 hashes for encrypti 0.6%
• CVE-2023-0451 High 7.5 Econolite EOS versions prior to 3.2.23 lack a password requirement for gaining “READONLY” access to log files and certain database and configuration files. One such file contains tables with MD5 hashe 0.8%