CVE-2020-6780

CVE-2020-6780 describes a vulnerability in Bosch FSM-2500 and FSM-5000 servers (up to version 5.2) where user password hashes are stored using insufficient computational effort (MD5). An authenticated remote attacker with administrative privileges can exploit this to dump other user credentials and potentially recover plaintext passwords through brute-forcing. With a CVSS score of 4.9 (Medium), this vulnerability requires high privileges for exploitation but can lead to a complete compromise of confidentiality. There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.