Lucene search

IcscertCVELIST:CVE-2021-33003

HistoryAug 30, 2021 - 5:10 p.m.

CVE-2021-33003

2021-08-3017:10:59

CWE-916

icscert

www.cve.org

delta electronics

diaenergie

version 1.7.5

vulnerability

weak hashing algorithm

cleartext password retrieval

cve-2021-33003

AI Score

5.7

Confidence

High

EPSS

Percentile

10.4%

JSON

Delta Electronics DIAEnergie Version 1.7.5 and prior may allow an attacker to retrieve passwords in cleartext due to a weak hashing algorithm.

CNA Affected

[
  {
    "product": "Delta Electronics DIAEnergie",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "DIAEnergie Version 1.7.5 and prior"
      }
    ]
  }
]

References

us-cert.cisa.gov/ics/advisories/icsa-21-238-03