CVE-2016-9353
HighSummary
An issue was discovered in Advantech SUISAccess Server Version 3.0 and prior related to the storage of the admin password. The password is encrypted with a static key hard-coded in the program, allowing attackers to reverse it.
Risk Assessment
Attackers could gain access to the admin password, posing a serious security risk to the system and its data. This could lead to unauthorized access to critical system functions.
Recommendation
It is recommended to upgrade to the latest version of the software that improves password storage. Additionally, consider changing admin passwords and implementing further security measures.
Other vulnerabilities in Advantech SUISAccess Server
See all- CVE-2016-9351High
An issue was discovered in Advantech SUISAccess Server Version 3.0 and prior related to directory traversal/file upload error that allows an attacker to upload and unpack a zip file.
- CVE-2016-9349High
An issue was discovered in Advantech SUISAccess Server Version 3.0 and prior, allowing an attacker to traverse the file system and extract files, potentially leading to information disclosure.
Original NVD description (English source)
An issue was discovered in Advantech SUISAccess Server Version 3.0 and prior. The admin password is stored in the system and is encrypted with a static key hard-coded in the program. Attackers could reverse the admin account password for use.