CyberRota Analysis
AI-GeneratedA vulnerability in the Backup/Restore component of Netcore NAP930 allows for the manipulation of the aes_pass argument, leading to the use of a hard-coded cryptographic key. This flaw can be exploited remotely, potentially compromising sensitive data. Organizations using this product should prioritize remediation, especially if they handle sensitive information.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A vulnerability was determined in Netcore NAP930 0.1.241010.141410. This vulnerability affects unknown code of the file /lib/functions/backup_common.sh of the component Backup/Restore. This manipulation of the argument aes_pass causes use of hard-coded cryptographic key . It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.