CVE-2026-112164
2026-11-09
17h17 +00:00
17h17 +00:00
指定 CVE 通知
掌握特定 CVE 的任何變更。
CVE 描述
The LaserGest mobile application encrypts stored assistance portal credentials with a hardcoded AES key and IV, allowing an attacker with access to the application package to recover them in cleartext.
CVE 資訊
相關弱點
| 弱點名稱 | 來源 | |
|---|---|---|
| Use of Hard-coded Cryptographic Key The product uses a hard-coded, unchangeable cryptographic key. |
||
| Insufficiently Protected Credentials The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval. |
