CVE-2025-55049
BaseFortify
Publication date: 2025-09-09
Last updated on: 2025-09-11
Assigner: Israel National Cyber Directorate
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-1394 | The product uses a default cryptographic key for potentially critical functionality. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability involves the use of a default cryptographic key, which means that the cryptographic key used for securing data is not unique or properly randomized. This can allow attackers to easily decrypt or manipulate sensitive information because the key is predictable or publicly known.
How can this vulnerability impact me? :
The impact of this vulnerability is high confidentiality and integrity risk, as attackers can exploit the default cryptographic key to access or alter sensitive data without authorization. This can lead to data breaches, loss of trust, and potential damage to systems or users.
How does this vulnerability affect compliance with common standards and regulations (like GDPR, HIPAA)?:
Using a default cryptographic key can lead to non-compliance with standards and regulations such as GDPR and HIPAA, which require strong protection of sensitive data. Failure to properly secure cryptographic keys may result in violations of data protection requirements and could lead to legal and financial penalties.