CVE-2026-47097
AJA HELO Plus < 2.1.7 Hardcoded AES Passphrase for Diagnostics Export Bundle
- State
- Published
- Severity
- 8.7 High
- Published
- Sep 30, 2026
- Updated
- Sep 30, 2026
- Reserved
- May 18, 2026
Description
AJA HELO Plus firmware before 2.1.7 contains an information disclosure vulnerability that allows unauthenticated attackers to decrypt sensitive diagnostics bundles by exploiting a static AES passphrase embedded in obfuscated form within the firmware. Attackers can reverse engineer the publicly available firmware image to recover the shared passphrase and decrypt diagnostics export bundles retrieved from the unauthenticated diagnostics endpoint on any affected device, exposing highly sensitive server information.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 8.7 High | CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N | VulnCheck |
| 3.1 | 7.5 High | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N | VulnCheck |
Weaknesses
- CWE-321 Use of Hard-coded Cryptographic Key
Affected Products
| Product | Versions |
|---|---|
HELO PlusAJA Video Systems |
|
References
- Vendor Advisoryvendor-advisory
- Release Notesrelease-notes
- Support Downloadpatchproduct
- https://www.vulncheck.com/advisories/aja-helo-plus-hardcoded-aes-passphrase-for-diagnostics-export-bundlethird-party-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.