CVE-2024-52334
Awaiting Analysis
Awaiting Analysis - Queue
Improper Password Encryption in syngo.plaza VB30E Enables Unauthorized Access
Publication date: 2026-02-10
Last updated on: 2026-02-10
Assigner: Siemens AG
Description
Description
A vulnerability has been identified in syngo.plaza VB30E (All versions < VB30E_HF07). The affected application does not encrypt the passwords properly.
This could allow an attacker to recover the original passwords and might gain unauthorized access.
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| siemens | syngo.plaza | to VB30E_HF07 (exc) |
| siemens | syngo.plaza_vb30e | to VB30E_HF07 (exc) |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-261 | Obscuring a password with a trivial encoding does not protect the password. |