CyberRota Analysis
AI-GeneratedAVideo's external-login accounts are vulnerable due to the use of the rand() function for password generation, resulting in weak 31-bit integers. This flaw allows attackers with access to password hashes to recover plaintext passwords within minutes using offline brute-force methods, exacerbated by the unsalted MD5 hashing. Organizations utilizing AVideo should prioritize addressing this vulnerability to safeguard user accounts against potential breaches.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
WWBN AVideo generates passwords for external-login accounts using rand() instead of a cryptographic generator, producing only 31-bit integers. Attackers with access to password hashes can recover plaintext passwords in minutes through offline brute-force attacks due to unsalted MD5-based hashing.