{"id":"CVE-2026-28745","published":"2026-10-09T15:17:13.670","lastModified":"2026-10-11T17:17:04.303","description":"Usernames and passwords, including the default credentials, are stored in the configuration file using weak encryption. If the default credentials are known by a malicious user, they could obtain other credentials on the system.","cvssScore":7.5,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwes":["CWE-257"],"vendors":[],"products":[],"references":[{"url":"https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-281-01.json","tags":[]},{"url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-281-01","tags":[]},{"url":"https://www.hms-networks.com/","tags":[]},{"url":"https://www.hms-networks.com/cybersecurity","tags":[]}],"exploitRefs":[{"url":"https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-281-01.json","tags":[]}],"hasPoc":true,"ai":{"summary":"The system stores usernames and passwords using weak encryption in its configuration file, making default credentials easily accessible to attackers who know them. This creates a credential exposure vulnerability where attackers can obtain additional system credentials.","exploitability":"Exploitation is moderately easy requiring only knowledge of default credentials, with no additional authentication or access requirements needed.","blast_radius":"If exploited, this flaw could allow attackers to access multiple system accounts and potentially escalate privileges across the affected system.","remediation":"Disable the weak encryption feature in configuration files or upgrade to version 2.590 or later if available.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["credential-exposure","weak-encryption","config-file"],"model":"garnet-coder","analyzedAt":"2026-10-17T09:01:42.638Z"}}