BaseFortify

Publication date: 2025-11-12

Last updated on: 2026-01-05

Assigner: MITRE

Description

Sogexia Android App Compile Affected SDK v35, Max SDK 32 and fixed in v36, was discovered to contain hardcoded encryption keys in the encryption_helper.dart file

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-11-12

Last Modified

2026-01-05

Generated

2026-07-07

AI Q&A

2025-11-13

EPSS Evaluated

2026-07-06

NVD

CVE-2025-63289

Affected Vendors & Products

Vendor	Product	Version / Range
sogexia	sogexia	35

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-321	The product uses a hard-coded, unchangeable cryptographic key.

Attack-Flow Graph

Executive Summary

This vulnerability involves the Sogexia Android App where hardcoded encryption keys were found in the encryption_helper.dart file. This means that the encryption keys used by the app were embedded directly in the app's code, which can be extracted by attackers, potentially compromising the security of encrypted data.

Impact Analysis

The presence of hardcoded encryption keys can allow attackers to decrypt sensitive data protected by the app, leading to data breaches, unauthorized access, and potential misuse of user information.

Hi! I’m here to help you understand CVE-2025-63289. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70