VULNERABILITY INTELLIGENCE

CVE-2022-25577

CVSS score9.1 CRITICAL
EPSS probability1.21%
CISA KEVNot currently listed
Published2022-03-25
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Description

ALF-BanCO v8.2.5 and below was discovered to use a hardcoded password to encrypt the SQLite database containing the user's data. Attackers who are able to gain remote or local access to the system are able to read and modify the data.

Weakness classification

  • CWE-798: Use of Hard-coded Credentials

Primary references