CVE-2023-0452 (eos)

All versions of Econolite EOS traffic control software are vulnerable to CWE-328: Use of Weak Hash, and use a weak hash algorithm for encrypting privileged user credentials. A configuration file that is accessible without authentication uses MD5 hashes for encrypting credentials, including those of administrators and technicians.

administrators algorithm authentication configuration control credentials cve cwe eos file hash hashes md5 privileged privileged user software traffic vulnerable