6.5
Medium
CVE-2024-23580 HCL DRYiCE Optibot Reset Station is impacted by insecure encryption of One-Time Passwords (OTPs)
Description
HCL DRYiCE Optibot Reset Station is impacted by insecure encryption of One-Time Passwords (OTPs). This could allow an attacker with access to the database to recover some or all encrypted values.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| DRYiCE Optibot Reset Station | Versions not published | |
| dryice_optibot_reset_station | 2.0 | No fix stated |
| dryice_optibot_reset_station | 1.0 | No fix stated |
Other CVEs of DRYiCE Optibot Reset Station
The 4 CVEs of DRYiCE Optibot Reset Station →
CVE-2024-30120
HCL DRYiCE Optibot Reset Station is impacted by an Unused Parameter in the web application
2.9
Low
CVE-2024-30119
HCL DRYiCE Optibot Reset Station is impacted by a missing Strict Transport Security Header
3.7
Low
CVE-2024-23579
HCL DRYiCE Optibot Reset Station is impacted by insecure encryption of security questions
6.5
Medium