Vulnerabilities (CVE)

Filtered by vendor Impero Subscribe
Filtered by product Impero Education Pro
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2015-5998 1 Impero 1 Impero Education Pro 2024-11-21 10.0 HIGH N/A
Impero Education Pro before 5105 relies on the -1|AUTHENTICATE\x02PASSWORD string for authentication, which allows remote attackers to execute arbitrary programs via an encrypted command.
CVE-2015-5997 1 Impero 1 Impero Education Pro 2024-11-21 7.8 HIGH N/A
Impero Education Pro before 5105 uses a hardcoded CBC key and initialization vector derived from a hash of the Imp3ro string, which makes it easier for remote attackers to obtain plaintext data by sniffing the network for ciphertext data.