AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2024-36496

HIGH · CVSS 7.5 EPSS 0.69%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2024-06-24 · Last synced 2026-08-04

CyberRota Analysis

This is a high severity vulnerability with a CVSS score of 7.5. See the original NVD description below for full technical details.

CVE
CVE-2024-36496
Severity
HIGH
CVSS
7.5
EPSS
0.69%

Original NVD Description

The configuration file is encrypted with a static key derived from a static five-character password which allows an attacker to decrypt this file. The application hashes this five-character password with the outdated and broken MD5 algorithm (no salt) and uses the first five bytes as the key for RC4. The configuration file is then encrypted with these parameters.