Lucene search
MitreCVE-2005-0809HistoryMay 02, 2005 - 4:00 a.m.
CVE-2005-0809
2005-05-0204:00:00
mitre
web.nvd.nist.gov
25
cve-2005-0809
notifylink
client key retrieval
weak encryption scheme
brute force attack
nvd
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
6.6
Confidence
Low
EPSS
0.011
Percentile
84.3%
NotifyLink, when configured for client key retrieval, allows remote attackers to obtain AES keys via a direct request to /hwp/get.asp, then uses a weak encryption scheme (fixed byte reordering) to protect the key, which allows remote attackers to obtain the key via a brute force attack.
Affected configurations
Node
notify_technologynotifylinkMatchenterprise_server
| Vendor | Product | Version | CPE |
|---|---|---|---|
| notify_technology | notifylink | enterprise_server | cpe:2.3:a:notify_technology:notifylink:enterprise_server:*:*:*:*:*:*:* |
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
6.6
Confidence
Low
EPSS
0.011
Percentile
84.3%
Related for CVE-2005-0809