Risk Assessment
1 CVEs
product
Monthly
ConnectWise-Password-Encryption-Utility.exe in ConnectWise Risk Assessment allows an attacker to extract a hardcoded AES decryption key via reverse engineering. Rated medium severity (CVSS 6.0), this vulnerability is low attack complexity. No vendor patch available.
Information Disclosure
Risk Assessment
NVD
GitHub
CVSS 3.1
6.0
EPSS
0.0%
EPSS 0%
CVSS 6.0
MEDIUM
This Month
ConnectWise-Password-Encryption-Utility.exe in ConnectWise Risk Assessment allows an attacker to extract a hardcoded AES decryption key via reverse engineering. Rated medium severity (CVSS 6.0), this vulnerability is low attack complexity. No vendor patch available.
Information Disclosure
Risk Assessment
NVD
GitHub