CVE-2025-27595

Critical

The device uses a weak hashing alghorithm to create the password hash. Hence, a matching password can be easily calculated by an attacker.…

SICK AG·CWE-328·Published 2025-03-14

CVSS

9.8

EPSS

0.01

KEV

Exploits

Vendor statements (2)

cve.orgen

197 chars

The device uses a weak hashing alghorithm to create the password hash. Hence, a matching password can be easily calculated by an attacker. This impacts the security and the integrity of the device.

NVDes

221 chars

El dispositivo utiliza un algoritmo hash débil para crear el hash de la contraseña. Por lo tanto, un atacante puede calcular fácilmente una contraseña coincidente. Esto afecta la seguridad y la integridad del dispositivo.

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
3.1	Primary	cve.org	9.8	—	—	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
3.1	Secondary	NVD	9.8	3.9	5.9	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H