Beveiligingsadvies

CVE-2024-0676

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2024-01-30 12:40:12
Laatst bijgewerkt 2024-10-17 18:02:12
Toegewezen door INCIBE
CVSS-score 5.6
Status PUBLISHED

Beschrijving

Weak password requirement vulnerability in Lamassu Bitcoin ATM Douro machines, in its 7.1 version , which allows a local user to interact with the machine where the application is installed, retrieve stored hashes from the machine and crack long 4-character passwords using a dictionary attack.