CVE-2022-26660

RunAsSpc 4.0 uses a universal and recoverable encryption key. In possession of a file encrypted by RunAsSpc, an attacker can recover the credentials that were used.

Score

CVSS 3.1 7.5 High

Status

Modified - cve@mitre.org

Published

2022-03-16

Last modified

2024-08-03

Weaknesses

CWE-798

Affected products

• Runasspc (Robotronic)

References

• https://robotronic.de/secureen.html