What is CVE-2024-23579?

CVE-2024-23579 is a medium-severity vulnerability in Hcl Software Dryice Optibot Reset Station, classified under Inadequate Encryption Strength. CVSS score: 6.5/10. Published 2024-05-28.

How severe is CVE-2024-23579?

Medium severity. CVSS v3 base score is 6.5 out of 10.

Vulnerability in Hcl Software Dryice Optibot Reset Station

CVE-2024-23579

HCL DRYiCE Optibot Reset Station is impacted by insecure encryption of security questions. This could allow an attacker with access to the database to recover some or all encrypted values.

EPSS: 0.002 (4.7th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N.

Affected products

Hcl Software Dryice Optibot Reset Station — versions 1.0, 2.0

Weakness classification (CWE)

CWE-326 — Inadequate Encryption Strength

References

psirt@hcl.com

Frequently asked questions

What is CVE-2024-23579?: CVE-2024-23579 is a medium-severity vulnerability in Hcl Software Dryice Optibot Reset Station, classified under Inadequate Encryption Strength. CVSS score: 6.5/10. Published 2024-05-28.
How severe is CVE-2024-23579?: Medium severity. CVSS v3 base score is 6.5 out of 10.