CVE-2025-4876

MediumCVSS 4.4/10Last modified Jun 17, 2026

Description

ConnectWise-Password-Encryption-Utility.exe in ConnectWise Risk Assessment allows an attacker to extract a hardcoded AES decryption key via reverse engineering. This key is embedded in plaintext within the binary and used in cryptographic operations without dynamic key management. Once obtained the key can be used to decrypt CSV input files used for authenticated network scanning.

Metrics

CVSS 3.1 4.4/10CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-321

Affected software

No affected versions have been published.

Timeline

Published: May 19, 2025
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2025

CVE-2025-487686.5Release of Invalid Pointer or Reference vulnerability was discovered in fs/inode/fs_inoderemove code of the Apache NuttX RTOS that allowed r CVE-2025-487698.1Use After Free vulnerability was discovered in fs/vfs/fs_rename code of the Apache NuttX RTOS, that due recursive implementation and single CVE-2025-48774.5There's a vulnerability in the libssh package where when a libssh consumer passes in an unexpectedly large input buffer to ssh_get_fingerpri CVE-2025-48783.6A vulnerability was found in libssh, where an uninitialized variable exists under certain conditions in the privatekey_from_file() function.CVE-2025-487809.8A deserialization of untrusted data vulnerability in the download file function of Soar Cloud HRD Human Resource Management System through v CVE-2025-487817.5An external control of file name or path vulnerability in the download file function of Soar Cloud HRD Human Resource Management System thro CVE-2025-487829.8An unrestricted upload of file with dangerous type vulnerability in the upload file function of Soar Cloud HRD Human Resource Management Sys CVE-2025-487837.5An external control of file name or path vulnerability in the delete file function of Soar Cloud HRD Human Resource Management System throug CVE-2025-487847.5A missing authorization vulnerability in Soar Cloud HRD Human Resource Management System through version 7.3.2025.0408 allows remote attacke CVE-2025-48797.8Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges in Citrix Workspace app for Windows CVE-2025-487955.6Apache CXF stores large stream based messages as temporary files on the local filesystem. A bug was introduced which means that the entire t CVE-2025-487967.3A flaw was found in GIMP. The GIMP ani_load_image() function is vulnerable to a stack-based overflow. If a user opens.ANI files, GIMP may be