PT-2024-16246 · Gessler Gmbh · Web-Master

Felix Eberstaller + 1 · Published 2024-02-01 · Updated 2025-08-07 · CVE-2024-1040

Positive Technologies (AI Summary)

CVSS v3.1

4.4

Medium

Base vector

AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Gessler GmbH WEB-MASTER (affected versions not specified)

Description The issue concerns the use of a weak hashing algorithm for storing user account passwords. An attacker can potentially restore passwords by breaking the hashes stored on the device.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Use of a Broken Cryptographic Algorithm

Weakness Enumeration

CWE-327

CWE-328

Related Identifiers

CVE-2024-1040

Affected Products

Web-Master

References · 8

• https://osv.dev/vulnerability/CVE-2024-1040 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-1040 · Security Note
• https://t.me/cveNotify/131330 · Telegram Post
• https://t.me/cvenotify/69646 · Telegram Post
• https://t.me/cvenotify/70426 · Telegram Post
• https://twitter.com/CVEnew/status/1753174543328325698 · Twitter Post
• https://t.me/cvenotify/69639 · Telegram Post
• https://cisa.gov/news-events/ics-advisories/icsa-24-032-01 · Note