| Package | Affected versions | Patched versions |
|---|---|---|
| computrols building automation software | ≤ 19.0.0 |
Computrols CBAS 18.0.0 mishandles password hashes. The approach is MD5 with a pw prefix, e.g., if the password is admin, it will calculate the MD5 hash of pwadmin and store it in a MySQL database.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free