VulnerabilityModified
CVE-2000-1173
Microsys CyberPatrol uses weak encryption (trivial encoding) for credit card numbers and uses no encryption for the remainder of the information during registration, which could allow attackers to sniff network traffic and obtain this sensitive…
MEDIUM 5.0EPSS 1.57%
Does this matter?
Lower severity and a low EPSS score (1.57%). Track it; it rarely justifies an emergency change on its own.
Description
Microsys CyberPatrol uses weak encryption (trivial encoding) for credit card numbers and uses no encryption for the remainder of the information during registration, which could allow attackers to sniff network traffic and obtain this sensitive information.
- CVSS 2.0
- 5.0 MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N
- EPSS
- 1.57% probability · 74th percentile
- CISA KEV
- Not listed
- Affected
- microsys/cyberpatrol
- Source
- cve@mitre.org
References
- http://archives.neohapsis.com/archives/bugtraq/2000-11/0323.htmlExploit, Vendor Advisory
- http://www.securityfocus.com/bid/1977Exploit, Vendor Advisory
- http://archives.neohapsis.com/archives/bugtraq/2000-11/0323.htmlExploit, Vendor Advisory
- http://www.securityfocus.com/bid/1977Exploit, Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.