Vulnerabilities (CVE)

Filtered by vendor Connectwise Subscribe
Filtered by product Risk Assessment
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2025-4876 1 Connectwise 1 Risk Assessment 2025-08-13 N/A 6.0 MEDIUM
ConnectWise-Password-Encryption-Utility.exe in ConnectWise Risk Assessment allows an attacker to extract a hardcoded AES decryption key via reverse engineering. This key is embedded in plaintext within the binary and used in cryptographic operations without dynamic key management. Once obtained the key can be used to decrypt CSV input filesĀ used for authenticated network scanning.