high7.5
CVE-2019-10855
Computrols CBAS 18.0.0 mishandles password hashes.
Impact
Computrols CBAS 18.0.0 mishandles password hashes. The approach is MD5 with a pw prefix, e.g., if the password is admin, it will calculate the MD5 hash of pwadmin and store it in a MySQL database.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Computrols | Computrols Building Automation Software | through 19.0.0 |