CVE-2017-13701
CriticalSummary
An issue was discovered on MOXA EDS-G512E 5.1 build 16072215 devices regarding the storage of backup files. These files contain sensitive information insecurely, as passwords are stored without encryption and without salt for hashing.
Risk Assessment
The organization is at risk of unauthorized access to sensitive data, which could lead to serious security breaches. The lack of proper password protection increases the risk of theft.
Recommendation
It is recommended to immediately implement password encryption and use salt for hashing to secure sensitive information. Additionally, consider updating devices to the latest software version.
Original NVD description (English source)
An issue was discovered on MOXA EDS-G512E 5.1 build 16072215 devices. The backup file contains sensitive information in a insecure way. There is no salt for password hashing. Indeed passwords are stored without being ciphered with a timestamped ciphering method.