CVE-2012-4899 WellinTech KingView 6.5.3 and earlier uses a weak password-hashing algorithm, which makes it easier for local users to discover credentials by reading an unspecified file.
LowCVSS 2.1
EPSS 0.32%
- Published
- Updated
- Exploit status
- No public exploit known
Description
WellinTech KingView 6.5.3 and earlier uses a weak password-hashing algorithm, which makes it easier for local users to discover credentials by reading an unspecified file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| wellintech kingview | <= 6.53 | No fix listed |
| wellintech kingview | = 3.0 | No fix listed |
| wellintech kingview | = 6.5.30.2010.18018 | No fix listed |
| wellintech kingview | = 6.52 | No fix listed |
| wellintech kingview | = 65.30.2010.18018 | No fix listed |
| wellintech kingview | = 65.30.17249 | No fix listed |
References
- www.us-cert.gov us-government-resource
- www.wellintech.com patch vendor-advisory