CVE-2025-26849

State
Published
Severity
4.3 Medium
Published
Mar 4, 2025
Updated
Mar 5, 2025
Reserved
Feb 16, 2025

Read the record on cve.org

Description

There is a Hard-coded Cryptographic Key in Docusnap 13.0.1440.24261, and earlier and later versions. This key can be used to decrypt inventory files that contain sensitive information such as firewall rules.

Scores

CVSSScoreVectorSource
3.14.3 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:Nmitre

Weaknesses

  • CWE-1394 Use of Default Cryptographic Key

Affected Products

ProductVersions
DocusnapDocusnap
  • 13.0.1440.24261Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.