Versa-networks Versa Operating System
Approved changes feed: RSS · Atom
cpe:2.3:o:versa-networks:versa_operating_system:-:*:*:*:*:*:*:*
part: o version: - update: *
| Vendor | Versa Networks (b3b8e39f-8cd4-5242-8ad1-4b4cc51ec686) |
|---|---|
| Product | Versa Operating System (904396c4-af8b-5abb-96b2-782467e40644) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2019-25030 |
vulnerable | 2026-06-08 05:13:41.843911 |
Details available
In Versa Director, Versa Analytics and VOS, Passwords are not hashed using an adaptive cryptographic hash function or key derivation function prior to storage. Popular hashing algorithms based on the Merkle-Damgardconstruction (such as MD5 and SHA-1) alone are insufficient in thwarting password cracking. Attackers can generate and use precomputed hashes for all possible password character combinations (commonly referred to as "rainbow tables") relatively quickly. The use of adaptive hashing algorithms such asscryptorbcryptor Key-Derivation Functions (i.e.PBKDF2) to hash passwords make generation of such rainbow tables computationally infeasible.
Published: 2021-05-26T18:45:38.000Z
Updated: 2024-08-05T03:00:19.000Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-16499 |
vulnerable | 2026-06-08 05:11:04.960666 |
Details available
In VOS compromised, an attacker at network endpoints can possibly view communications between an unsuspecting user and the service using man-in-the-middle attacks. Usage of unapproved SSH encryption protocols or cipher suites also violates the Data Protection TSR (Technical Security Requirements).
Published: 2021-05-26T18:45:44.000Z
Updated: 2024-08-05T10:24:32.993Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.