Unscored severity · published Sep 14, 2015
CVE-2015-5997
Impero Education Pro before 5105 uses a hardcoded CBC key and initialization vector derived from a hash of the Imp3ro string, which makes it easier for remote attackers to obtain…
–
CVSS
1.7%
EPSS
No
On KEV
Description
Impero Education Pro before 5105 uses a hardcoded CBC key and initialization vector derived from a hash of the Imp3ro string, which makes it easier for remote attackers to obtain plaintext data by sniffing the network for ciphertext data.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.7% · higher than 76% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IE
Impero Education Pro · Impero
through 5008 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2015-5997
CVE.org
https://www.cve.org/CVERecord?id=CVE-2015-5997
Third Party Advisory
http://www.kb.cert.org/vuls/id/549807
More from Impero Education Pro
–
CVE-2015-5998
Impero Education Pro before 5105 relies on the -1|AUTHENTICATE\x02PASSWORD string for authentication, which allows remote attackers to execute arbitrary programs via an encrypted…