title: Bruteforcing authentication cookie for a given user
description: The authentication cookies are generated using an algorithm based on the username, hardcoded secret and the up-time, and can be guessed in a reasonable time.
problem types: CWE-327 Use of a Broken or Risky Cryptographic Algorithm
affected:
{
defaultStatus: unaffected
product: H8951-4G-ESP
vendor: Hongdian
versions:
lessThan: 2310271149, status: affected, version: 0, versionType: custom
}