CVE-2025-27595: sick ag sick dl100-2xxxxxxx Use of Weak Hash

Vulnerability summary

CVE-2025-27595 is a critical (CVSS 9.8) Use of Weak Hash vulnerability in sick ag sick dl100-2xxxxxxx. EPSS estimates a 0.54% chance of exploitation in the next 30 days, higher than 44.5% of scored vulnerabilities.

Timeline

1. 14-03-2025
   PublishedVulnerability first disclosed.
2. 14-03-2025
   Last modifiedVulnerability information updated.

Description

The device uses a weak hashing alghorithm to create the password hash. Hence, a matching password can be easily calculated by an attacker. This impacts the security and the integrity of the device.

• CWE-328Use of Weak HashThe product uses an algorithm that produces a digest (output value) that does not meet security expectations for a hash function that allows an adversary to reasonably determine the original input (preimage attack), find another input that can produce the same hash (2nd preimage attack), or find multiple inputs that evaluate to the same hash (birthday attack).