A weak hashing algorithm protects the root password in GNCC GP5 v7.1.76. This weakness can enable an attacker to perform a brute‑force attack to discover root credentials and thereby gain unrestricted control over the device.

GNCC GP5 devices running firmware version 7.1.76 are affected. No other vendors or product versions are listed in the data.

The EPSS score is not available and the vulnerability is not listed in CISA KEV, indicating no publicly known exploits. However, because the weakness could allow a successful brute‑force attack, an attacker with any form of access to the device could obtain root privileges. The lack of an official patch or workaround means the vulnerability remains exploitable until firmware is updated or additional controls are applied.