Actively Exploited in the Wild
This vulnerability is being actively exploited in the wild.
Evope Core Hardcoded Cryptographic Key Vulnerability
Vulnerability
A vulnerability in Evope Core version 1.1.3.20 allows local attackers to access sensitive information by exploiting hardcoded cryptographic keys. These keys, embedded in the source code, can be extracted and used to compromise encryption, as the same key is applied across all software installations. This flaw also eliminates the possibility of key rotation, leaving all users vulnerable to exploitation.
Impact
The hardcoded keys can be extracted and potentially used to decrypt sensitive information or authenticate unauthorized actions, compromising the security of all users simultaneously.
Vulnerability Rating
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.
