CVE-2020-6780 - Password Hash With Insufficient Computational Effort in the Database of Bosch FSM-2500 Server and Bosch FSM-5000 Server

Back Back to CVE browser

MEDIUM

Password Hash With Insufficient Computational Effort in the Database of Bosch FSM-2500 Server and Bosch FSM-5000 Server

Published Jan 25, 2021

4.9

MEDIUM

CVSS 3.1

EPSS 0.56%

Description

Use of Password Hash With Insufficient Computational Effort in the database of Bosch FSM-2500 server and Bosch FSM-5000 server up to and including version 5.2 allows a remote attacker with admin privileges to dump the credentials of other users and possibly recover their plain-text passwords by brute-forcing the MD5 hash.

Affected products

Vendor Bosch Product n/a Default
n/a
- Version
  unspecified
  Status
  affected
  Constraints
  <=5.2

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Bosch

n/a

Version	Status	Constraints
unspecified	affected	<=5.2

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-916

References (1)

https://psirt.bosch.com/security-advisories/BOSCH-SA-332072-BT.html
x_refsource_MISCVendor Advisory

Link	Providers	Tags
https://psirt.bosch.com/security-advisories/BOSCH-SA-332072-BT.html		x_refsource_MISCVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner bosch

Published Jan 25, 2021

Updated Sep 17, 2024

Reserved Jan 10, 2020

Link CVE-2020-6780

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2020-6780

Red Hat

Severity n/a

Public date n/a

Links CVE-2020-6780