Hanwha Device Manager Hardcoded Encryption Key Vulnerability Allowing Decryption of Sensitive Information

A vulnerability has been identified in Hanwha Device Manager, where a hardcoded encryption key is available for decrypting sensitive information. This issue was discovered by Nozomi Networks Labs, which specializes in security for Industrial Control Systems (ICS) and OT/IoT environments. The manufacturer has released a patch for this vulnerability; details can be found in the manufacturer's report.

Impact

Exploitation of this vulnerability allows for the decryption of sensitive information, potentially leading to unauthorized access or disclosure of confidential data.

Remediation

Users are advised to update to the latest firmware version. Please refer to the manufacturer's report for specific details and workarounds.