CVE-2021-38461CWE-321

AUVESY Versiondog

High · published October 22, 2021

CVSS v3.1
8.2
EPSS
1%
Percentile
45.1
In the wild
Unconfirmed
What it is

The affected product uses a hard-coded blowfish key for encryption/decryption processes. The key can be easily extracted from binaries.

The record
Technical detail
CVSS v3.1
8.2 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00548 · 45.1th percentile
Weakness
CWE-321 · Use of Hard-coded Cryptographic Key
Published
2021-10-22T11:23Z
EPSS history
Timeline
  • 22 OCT 11:23Z
    AUVESY Versiondog
    cvelistv5