What is the CVSS score of CVE-2013-7252?

CVE-2013-7252 has a CVSS 2.0 base score of 5.0 (Medium). CVSS vector: AV:N/AC:L/Au:N/C:P/I:N/A:N. EPSS exploitation probability: 0.4%.

Is there a public PoC exploit available for CVE-2013-7252?

Yes, a public proof-of-concept exploit is available for CVE-2013-7252. Prioritise patching immediately. EPSS: 0.4%.

Is there a patch available for CVE-2013-7252?

Yes, a patch is available for CVE-2013-7252. Update the affected software to the latest version immediately.

Kde Applications CVE-2013-7252

MEDIUM

Cryptographic Issues (CWE-310)

2015-01-18 secalert@redhat.com

Information Disclosure Kde Applications

5.0

CVSS 2.0 · NVD

Severity by source

NVD PRIMARY

5.0 MEDIUM

AV:N/AC:L/Au:N/C:P/I:N/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

AV:N/AC:L/Au:N/C:P/I:N/A:N

Attack Vector

Network

Attack Complexity

Low

Confidentiality

Integrity

None

Availability

None

Lifecycle Timeline

CVE Published

Jan 18, 2015 - 18:59 cve.org

MEDIUM 5.0

DescriptionCVE.org

AnalysisAI

kwalletd in KWallet before KDE Applications 14.12.0 uses Blowfish with ECB mode instead of CBC mode when encrypting the password store, which makes it easier for attackers to guess passwords via a. Rated medium severity (CVSS 5.0), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.

Technical ContextAI

This vulnerability is classified under CWE-310. kwalletd in KWallet before KDE Applications 14.12.0 uses Blowfish with ECB mode instead of CBC mode when encrypting the password store, which makes it easier for attackers to guess passwords via a codebook attack. Affected products include: Kde Kde Applications.

RemediationAI

A vendor patch is available. Apply the latest security update as soon as possible. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.