CVE-2021-34688

iDrive RemotePC before 7.6.48 on Windows allows information disclosure

published July 15, 2021

CVSS
—
EPSS
0%
Percentile
5.1
In the wild
Unconfirmed
What it is

iDrive RemotePC before 7.6.48 on Windows allows information disclosure. A locally authenticated attacker can read an encrypted version of the system's Personal Key in world-readable %PROGRAMDATA% log files. The encryption is done using a hard-coded static key and is therefore reversible by an attacker.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00162 · 5.1th percentile
Published
2021-07-15T13:17Z
EPSS history
Timeline
  • 15 JUL 13:17Z
    iDrive RemotePC before 7.6.48 on Windows allows information disclosure
    cvelistv5