CVE-2020-25493

Katalog CVE

CVSS 7.5 · High EPSS 0,89%

Kerentanan Use of a Broken or Risky Cryptographic Algorithm pada oclean. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

Oclean Mobile Application 2.1.2 communicates with an external website using HTTP so it is possible to eavesdrop the network traffic. The content of HTTP payload is encrypted using XOR with a hardcoded key, which allows for the possibility to decode the traffic.

Rincian

Terbit di NVD

11 Februari 2021

Terakhir diubah

9 Juli 2026

Status NVD

Modified

CVSS 3.1

7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-327: Use of a Broken or Risky Cryptographic Algorithm
CWE-798: Use of Hard-coded Credentials

EPSS (30 hari)

0,89% peluang dieksploitasi; lebih tinggi dari 58,4% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/c3r34lk1ll3r/decrypt-oclean-traffic exploit · advisory pihak ketiga
• https://play.google.com/store/apps/details?id=com.yunding.noopsychebrushforeign product