CVE-2012-3018 | BDVDB-2026-51311 Detail

Description#

The lockout-recovery feature in the Security Configurator component in ICONICS GENESIS32 9.22 and earlier and BizViz 9.22 and earlier uses an improper encryption algorithm for generation of an authentication code, which allows local users to bypass intended access restrictions and obtain administrative access by predicting a challenge response.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.us-cert.gov/control_systems/pdf/ICSA-12-212-01.pdf

Exploit#

No public exploit known

History#

Version 12012-07-31Record published in the CVE List.
Version 22024-09-16Most recent update recorded in the CVE List.