Lucene search
HistoryJun 09, 2015 - 2:59 p.m.
CVE-2015-4080
cve-2015-4080
kankun smart socket
hardcoded key
aes 256
remote attackers
sensitive information
network sniffing
device access
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
6.4 Medium
AI Score
Confidence
Low
0.003 Low
EPSS
Percentile
71.3%
The Kankun Smart Socket device and mobile application uses a hardcoded AES 256 bit key, which makes it easier for remote attackers to (1) obtain sensitive information by sniffing the network and (2) obtain access to the device by encrypting messages.
Affected configurations
Node
kankunsmartsocket
| CPE | Name | Operator | Version |
|---|---|---|---|
| kankun:smartsocket | kankun smartsocket | eq | * |
Related
packetstorm
packetstorm
Kankun Smart Socket / Mobile App Hardcoded AES Key
2015-06-08 00:00:00
prion
prion
Hardcoded credentials
2015-06-09 14:59:00
cvelist
cvelist
CVE-2015-4080
2015-06-09 14:00:00
nvd
nvd
CVE-2015-4080
2015-06-09 14:59:06
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
6.4 Medium
AI Score
Confidence
Low
0.003 Low
EPSS
Percentile
71.3%
Related for CVE-2015-4080