Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
** UNSUPPORTED WHEN ASSIGNED ** [An attacker can capture an authenticating hash and utilize it to create new sessions. The hash is also a poorly salted MD5 hash, which could result in a successful brute force password attack. Impacted product is BCM-WEB version 3.3.X. Recommended fix: Upgrade to a supported product such as Alerton ACM.] Out of an abundance of caution, this CVE ID is being assigned to better serve our customers and ensure all who are still running this product understand that the product is end of life and should be removed or upgraded.
CVSS Information
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L
Vulnerability Type
使用欺骗进行的认证绕过
Vulnerability Title
Honeywell Alerton 安全漏洞
Vulnerability Description
Honeywell Alerton是美国霍尼韦尔（Honeywell）公司的一个解决方案。 Honeywell Alerton BCM-WEB 3.3.X版本存在安全漏洞。攻击者利用该漏洞可以捕获身份验证哈希并利用它来创建新会话。
CVSS Information
N/A
Vulnerability Type
N/A