CVE Catalog
CVE-2023-36608
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk0.18%
8th percentile - higher than 8% of all known CVEs
Summary
Affected TBox RTUs store hashed passwords using MD5 encryption, which is considered insecure.
Risk Assessment
Using MD5 for password storage exposes the organization to attacks such as password cracking, potentially leading to unauthorized access to systems.
Recommendation
It is recommended to migrate to more secure hashing algorithms like bcrypt or Argon2 to protect credential data.
Original NVD description (English source)
The affected TBox RTUs store hashed passwords using MD5 encryption, which is an insecure encryption algorithm.