{"id":"CVE-2020-11916","aliases":["EUVD-2020-4253","GHSA-q37q-6c8j-qf6q"],"status":"published","title":"An issue was discovered in Siime Eye 14.1.00000001.3.330.0.0.3.14. The password for the root user...","description":"An issue was discovered in Siime Eye 14.1.00000001.3.330.0.0.3.14. The password for the root user is hashed using an old and deprecated hashing technique. Because of this deprecated hashing, the success probability of an attacker in an offline cracking attack is greatly increased.","severity":{"version":"3.1","score":6.3,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","level":"medium","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-10","score":0.00494,"percentile":0.42766,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-327"],"published":"2024-11-07T00:00:00Z","modified":"2026-06-17T02:51:02Z","products":[{"vendor":"svakom","product":"svakom_siime_eye_firmware"}],"references":[{"url":"https://seclists.org/fulldisclosure/2024/Jul/14","tags":["mailing-list","Exploit","Mailing List","Third Party Advisory"]},{"url":"http://seclists.org/fulldisclosure/2024/Jul/14"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-11916"},{"url":"https://github.com/advisories/GHSA-q37q-6c8j-qf6q"}],"sources":{"cve":[{"id":"CVE-2020-11916","description":"An issue was discovered in Siime Eye 14.1.00000001.3.330.0.0.3.14. The password for the root user is hashed using an old and deprecated hashing technique. Because of this deprecated hashing, the success probability of an attacker in an offline cracking attack is greatly increased.","status":"published","published":"2024-11-07T00:00:00Z","modified":"2025-11-04T17:12:09.099Z","cvss":[{"version":"3.1","score":6.3,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","level":"medium","assessor":"adp"}],"cwes":["CWE-327"],"updated_at":"2026-11-02T14:35:57.67317Z"}],"euvd":[{"id":"EUVD-2020-4253","description":"An issue was discovered in Siime Eye 14.1.00000001.3.330.0.0.3.14. The password for the root user is hashed using an old and deprecated hashing technique. Because of this deprecated hashing, the success probability of an attacker in an offline cracking attack is greatly increased.","status":"published","published":"2024-11-07T00:00:00Z","modified":"2025-11-04T17:12:09Z","cvss":[{"version":"3.1","score":6.3,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T19:49:28.381167Z"}],"ghsa":[{"id":"GHSA-q37q-6c8j-qf6q","title":"An issue was discovered in Siime Eye 14.1.00000001.3.330.0.0.3.14. The password for the root user...","description":"An issue was discovered in Siime Eye 14.1.00000001.3.330.0.0.3.14. The password for the root user is hashed using an old and deprecated hashing technique. Because of this deprecated hashing, the success probability of an attacker in an offline cracking attack is greatly increased.","status":"published","published":"2024-11-07T18:31:24Z","modified":"2025-11-04T18:31:30Z","cvss":[{"version":"3.1","score":6.3,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","level":"medium"}],"cwes":["CWE-327"],"updated_at":"2026-11-02T15:04:33.911399Z"}],"nvd":[{"id":"CVE-2020-11916","description":"An issue was discovered in Siime Eye 14.1.00000001.3.330.0.0.3.14. The password for the root user is hashed using an old and deprecated hashing technique. Because of this deprecated hashing, the success probability of an attacker in an offline cracking attack is greatly increased.","status":"published","published":"2024-11-07T18:15:15.31Z","modified":"2026-06-17T02:51:02.977Z","cvss":[{"version":"3.1","score":6.3,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","level":"medium","assessor":"secondary"}],"cwes":["CWE-327"],"updated_at":"2026-11-02T14:06:48.591569Z"}]}}
