CVE-2025-26849CWE-1394

There is a Hard-coded Cryptographic Key in Docusnap 13.0.1440.24261, and earlier and later versions

Medium · published March 4, 2025

CVSS v3.1
4.3
EPSS
0%
Percentile
15.3
In the wild
Unconfirmed
What it is

There is a Hard-coded Cryptographic Key in Docusnap 13.0.1440.24261, and earlier and later versions. This key can be used to decrypt inventory files that contain sensitive information such as firewall rules.

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00249 · 15.3th percentile
Weakness
CWE-1394 · Use of Default Cryptographic Key
Published
2025-03-04T00:00Z
EPSS history
Timeline
  • 04 MAR 00:00Z
    There is a Hard-coded Cryptographic Key in Docusnap 13.0.1440.24261, and earlier and later versions
    cvelistv5