WWBN AVideo constructs external‑login passwords using the C libc function rand(), which outputs only 31‑bit values. The resulting passwords are stored as unsalted MD5 hashes. The limited entropy and lack of salting mean that an attacker who obtains the password hashes can recover the original passwords in a matter of minutes through an offline brute‑force search. This compromises the confidentiality of affected user accounts and enables account takeover or lateral movement. The vulnerability is a classic instance of weak random number generation (CWE‑330).

The AVideo application from WWBN is affected, regardless of version, as the external‑login password generation mechanism relies on the rand() function and the MD5 hashing routine. All installations that expose the external‑login feature must be considered vulnerable until a fix is applied.

The CVSS score of 7.4 indicates a high severity exploit. EPSS data is not available, so the current exploitation probability is unknown, but the existence of the weakness and the ease of offline cracking gives the attacker a significant advantage once password hashes are in hand. Because the issue requires only a local breach of hash data, the attack vector is inferred to be an adversary who has already accessed or stolen the database containing the unsalted MD5 hashes. In such a scenario, the attacker can recover plaintext passwords almost instantaneously, enabling rapid compromise of the affected accounts. The vulnerability is not listed in CISA KEV, but the potential impact warrants immediate attention.