CVE-2025-31362

{"id": "CVE-2025-31362", "cveTags": [], "metrics": {"cvssMetricV30": [{"type": "Secondary", "source": "vultures@jpcert.or.jp", "cvssData": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 3.7, "attackVector": "NETWORK", "baseSeverity": "LOW", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "impactScore": 1.4, "exploitabilityScore": 2.2}]}, "published": "2025-04-11T10:15:16.413", "references": [{"url": "https://jvn.jp/en/jp/JVN30641875/", "source": "vultures@jpcert.or.jp"}, {"url": "https://knowledge.bizrobo.com/hc/ja/articles/360029772271", "source": "vultures@jpcert.or.jp"}, {"url": "https://knowledge.bizrobo.com/hc/ja/articles/39951710517145", "source": "vultures@jpcert.or.jp"}, {"url": "https://knowledge.bizrobo.com/hc/ja/articles/39952052043289", "source": "vultures@jpcert.or.jp"}, {"url": "https://knowledge.bizrobo.com/hc/ja/articles/39953373809305", "source": "vultures@jpcert.or.jp"}], "vulnStatus": "Awaiting Analysis", "weaknesses": [{"type": "Primary", "source": "vultures@jpcert.or.jp", "description": [{"lang": "en", "value": "CWE-321"}]}], "descriptions": [{"lang": "en", "value": "Use of hard-coded cryptographic key issue exists in BizRobo! all versions. Credentials inside robot files may be obtained if the encryption key is available.\r\nThe vendor provides the workaround information and recommends to apply it to the deployment environment."}, {"lang": "es", "value": "Existe un problema con el uso de claves criptogr\u00e1ficas codificadas en todas las versiones de BizRobo!. Las credenciales dentro de los archivos robot se pueden obtener si la clave de cifrado est\u00e1 disponible. El proveedor proporciona informaci\u00f3n sobre el workaround y recomienda aplicarlo al entorno de despliegue."}], "lastModified": "2025-04-11T15:39:52.920", "sourceIdentifier": "vultures@jpcert.or.jp"}