Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-10742
HistorySep 29, 2021 - 12:00 a.m.

Rucky encryption problem vulnerability

2021-09-2900:00:00
China National Vulnerability Database
www.cnvd.org.cn
5
rucky
android
vulnerability
weak encryption
rsa
ecb
pkcs1padding
patch
workaround
security features

EPSS

0.001

Percentile

51.2%

Rucky is an Android application that performs the Usb Hid attack (Rubber Duck) in multiple ways. Rucky is vulnerable to an encryption issue that stems from the use of weak encryption algorithms (RSA/ECB/PKCS1Padding). The issue will be patched in v2.3 for releases and after 426 for nightly releases. As a workaround, advanced security features can be disabled if not required. No detailed vulnerability details are currently available.

EPSS

0.001

Percentile

51.2%

Related for CNVD-2022-10742