alerton_bcm-web_firmware vulnerabilities

1 known vulnerability in alerton_bcm-web_firmware from Honeywell. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  BCM-WEB: Authentication Bypass by Spoofing

  CVE-2023-3243Jun 28, 2023Alerton

  ** UNSUPPORTED WHEN ASSIGNED ** [An attacker can capture an authenticating hash and utilize it to create new sessions. The hash is also a poorly salted MD5 hash, which could result in a successful brute force password attack. Impacted product is BCM-WEB versio