PT-2024-19947 · Hcl · Hcl Dryice Optibot Reset Station

Monica Murray · Published 2024-05-28 · Updated 2024-07-03 · CVE-2024-23580

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions HCL DRYiCE Optibot Reset Station (affected versions not specified)

Description The issue concerns insecure encryption of One-Time Passwords (OTPs) in the HCL DRYiCE Optibot Reset Station. This could potentially allow an attacker with access to the database to recover some or all encrypted values.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Inadequate Encryption Strength

Weakness Enumeration

CWE-326

Related Identifiers

CVE-2024-23580

Affected Products

Hcl Dryice Optibot Reset Station

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2024-23580 · Security Note
• https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0113496 · Note