CVE-2020-16231

CVE-2020-16231 describes a weak cryptography vulnerability in Bachmann Electronic M-Base Controllers (MSYS v1.06.14 and later), affecting numerous active and end-of-life hardware controllers. This flaw allows unauthenticated remote attackers to access password hashes if the default Security Level 0 is active, or authenticated remote attackers (or those with physical access) to decrypt passwords at Security Level 4. With a CVSS score of 8.8 (HIGH), the vulnerability presents a significant risk of high confidentiality, integrity, and availability impact due to its network attack vector and low attack complexity. There is currently no evidence of active exploitation, and no public exploit code (Metasploit, Nuclei, ExploitDB) or significant community discussion or media coverage has been identified.