CVE-2024-53522

High

Bangkok Medical Software HOSxP XE v4.64.11.3 was discovered to contain a hardcoded IDEA Key-IV pair in the HOSxPXE4.exe and HOS-WIN32.INI…

mitre·CWE-331·Published 2025-01-07

CVSS

7.5

EPSS

0.01

KEV

Exploits

cve.orgen

204 chars

Bangkok Medical Software HOSxP XE v4.64.11.3 was discovered to contain a hardcoded IDEA Key-IV pair in the HOSxPXE4.exe and HOS-WIN32.INI components. This allows attackers to access sensitive information.

NVDen

204 chars

NVDes

237 chars

Se descubrió que Bangkok Medical Software HOSxP XE v4.64.11.3 contenía un par de claves IDEA-IV codificadas de forma rígida en los componentes HOSxPXE4.exe y HOS-WIN32.INI. Esto permite a los atacantes acceder a información confidencial.

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
3.1	Primary	cve.org	7.5	—	—	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
3.1	Primary	cve.org	7.5	—	—	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N