Description

The Blink1Control2 application <= 2.2.7 uses weak password encryption and an insecure method of storage.

Remediation

References

https://github.com/todbot/Blink1Control2/releases

https://github.com/p1ckzi/CVE-2022-35513

http://packetstormsecurity.com/files/168428/Blink1Control2-2.2.7-Weak-Password-Encryption.html

Related Vulnerabilities

CVE-2023-34617 Vulnerability in maven package com.owlike:genson

CVE-2022-21186 Vulnerability in npm package @acrontum/filesystem-template

CVE-2022-35949 Vulnerability in npm package undici

CVE-2020-15252 Vulnerability in maven package org.xwiki.platform:xwiki-platform-oldcore

CVE-2021-23368 Vulnerability in npm package postcss

Severity

High

Classification

CWE-327 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Tags

Release Notes Third Party Advisory Exploit VDB Entry