Description
The LaserGest mobile application encrypts stored assistance portal credentials with a hardcoded AES key and IV, allowing an attacker with access to the application package to recover them in cleartext.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| laservideo | lasergest | 1.0.18 | — |