Description
A flaw has been found in editso fuso up to 1.0.4-beta.7. This affects the function PenetrateRsaAndAesHandshake of the file src/net/penetrate/handshake/mod.rs. This manipulation of the argument priv_key causes inadequate encryption strength. Remote exploitation of the attack is possible. A high degree of complexity is needed for the attack. The exploitability is reported as difficult.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| editso | fuso | 1.0.4-beta.0, 1.0.4-beta.1, 1.0.4-beta.2, 1.0.4-beta.3, 1.0.4-beta.4, 1.0.4-beta.5, 1.0.4-beta.6, 1.0.4-beta.7 | — |
References
- VDB-321506 | editso fuso mod.rs PenetrateRsaAndAesHandshake inadequate encryption vdb-entry technical-description
- VDB-321506 | CTI Indicators (IOB, IOC, TTP, IOA) signature permissions-required
- Submit #635449 | editso fuso dev CWE-326: Inadequate Encryption Strength third-party-advisory
- https://chatgpt.com/share/68ae1bfa-8cd4-8005-8add-969bc42047b4 related