CVE-2005-0809

HIGH · CVSS 7.5 EPSS 1.20%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2005-05-02 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2005-0809

Severity

HIGH

CVSS

7.5

EPSS

1.20%

Original NVD Description

NotifyLink, when configured for client key retrieval, allows remote attackers to obtain AES keys via a direct request to /hwp/get.asp, then uses a weak encryption scheme (fixed byte reordering) to protect the key, which allows remote attackers to obtain the key via a brute force attack.