CVE-2015-7914

Sauter EY-WS505F0x0 moduWeb Vision before 1.6.0 allows remote attackers to bypass authentication by leveraging knowledge of a password hash without knowledge of the associated password.

Score

CVSS 3.0 8.1 High

Status

Modified - ics-cert@hq.dhs.gov

Published

2016-02-06

Last modified

2024-08-06

Weaknesses

CWE-254, CWE-287

Affected products

• Moduweb Vision (Sauter)

References

• http://seclists.org/fulldisclosure/2016/Feb/25
• https://ics-cert.us-cert.gov/advisories/ICSA-16-033-01