CVE-2017-20040

low-risk

Published 2022-06-11

A vulnerability was found in SICUNET Access Controller 0.32-05z. It has been declared as problematic. This vulnerability affects unknown code of the component Password Storage. The manipulation leads to weak encryption. Attacking locally is a requirement.

Do I need to act?

0.02% chance of exploitation

EPSS score — low exploit probability

Not on CISA KEV list

No confirmed active exploitation reported to CISA

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

CVSS 5.9/10 Medium

LOCAL / LOW complexity

Affected Products (1)

Access Control

Affected Vendors

Sicunet

References (4)

Mailing List http://seclists.org/fulldisclosure/2017/Mar/25

Third Party Advisory https://vuldb.com/?id.98908

Mailing List http://seclists.org/fulldisclosure/2017/Mar/25

Third Party Advisory https://vuldb.com/?id.98908

/ 100

low-risk

Severity 19/34 · Moderate

Exploitability 0/34 · Minimal

Exposure 5/34 · Minimal