vendor:
UR5X, UR32L, UR32, UR35, UR41 (Industrial Cellular Routers)
by:
Bipin Jitiya
6.1
CVSS
HIGH
Credential Leakage
312
CWE
Product Name: UR5X, UR32L, UR32, UR35, UR41 (Industrial Cellular Routers)
Affected Version From: Not specified
Affected Version To: Not specified
Patch Exists: NO
Related CWE: CVE-2023-43261
CPE: Not specified
Platforms Tested: Ubuntu 20.04.6 LTS with Python 3.8.10
2023
Credential Leakage Through Unprotected System Logs and Weak Password Encryption
The vulnerability allows an attacker to access sensitive credentials due to unprotected system logs and weak password encryption. By decrypting the passwords stored in the system logs, an attacker can obtain user credentials. This vulnerability has been assigned the CVE identifier CVE-2023-43261.
Mitigation:
To mitigate this vulnerability, it is recommended to ensure that system logs are properly secured and encrypted. Additionally, implementing strong password encryption algorithms and secure storage mechanisms can help prevent credential leakage.