CVE-2025-55049
Awaiting Analysis Awaiting Analysis - Queue
BaseFortify

Publication date: 2025-09-09

Last updated on: 2025-09-11

Assigner: Israel National Cyber Directorate

Description
Use of Default Cryptographic Key (CWE-1394)
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2025-09-09
Last Modified
2025-09-11
Generated
2026-06-16
AI Q&A
2025-09-09
EPSS Evaluated
2026-06-15
NVD
CVE-2025-55049
EUVD
EUVD-2025-27428
Affected Vendors & Products
Currently, no data is known.
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-1394 The product uses a default cryptographic key for potentially critical functionality.
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

This vulnerability involves the use of a default cryptographic key, which means that the cryptographic key used for securing data is not unique or properly randomized. This can allow attackers to easily decrypt or manipulate sensitive information because the key is predictable or publicly known.

Impact Analysis

The impact of this vulnerability is high confidentiality and integrity risk, as attackers can exploit the default cryptographic key to access or alter sensitive data without authorization. This can lead to data breaches, loss of trust, and potential damage to systems or users.

Compliance Impact

Using a default cryptographic key can lead to non-compliance with standards and regulations such as GDPR and HIPAA, which require strong protection of sensitive data. Failure to properly secure cryptographic keys may result in violations of data protection requirements and could lead to legal and financial penalties.

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2025-55049. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart