Lucene search
CertccCVE-2015-5997HistorySep 14, 2015 - 2:59 p.m.
CVE-2015-5997
2015-09-1414:59:00
certcc
web.nvd.nist.gov
34
cve-2015-5997
impero education pro
hardcoded cbc key
remote attackers
plaintext data
network sniffing
CVSS2
7.8
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:C/I:N/A:N
AI Score
6.8
Confidence
Low
EPSS
0.006
Percentile
78.9%
Impero Education Pro before 5105 uses a hardcoded CBC key and initialization vector derived from a hash of the Imp3ro string, which makes it easier for remote attackers to obtain plaintext data by sniffing the network for ciphertext data.
Affected configurations
Node
imperoimpero_education_proRange≤5008
| Vendor | Product | Version | CPE |
|---|---|---|---|
| impero | impero_education_pro | * | cpe:2.3:a:impero:impero_education_pro:*:*:*:*:*:*:*:* |
References
Related
prion
prion
Hardcoded credentials
2015-09-14 14:59:00
cvelist
cvelist
CVE-2015-5997
2015-09-14 14:00:00
nvd
nvd
CVE-2015-5997
2015-09-14 14:59:00
cert
cert
CVSS2
7.8
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:C/I:N/A:N
AI Score
6.8
Confidence
Low
EPSS
0.006
Percentile
78.9%
Related for CVE-2015-5997