Vulnerabilities > CVE-2022-35513 - Insecure Storage of Sensitive Information vulnerability in Blink1 Blink1Control2

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
HIGH
Integrity impact
NONE
Availability impact
NONE
network
low complexity
blink1
CWE-922
NVD
Published: 2022-09-07
Updated: 2023-08-08

Summary

The Blink1Control2 application <= 2.2.7 uses weak password encryption and an insecure method of storage.

Vulnerable Configurations

Part Description Count
Application
Blink1
17

Common Weakness Enumeration (CWE)

References