VulnerabilityDeferred

CVE-2024-52614

Use of hard-coded cryptographic key issue exists in "Kura Sushi Official App Produced by EPARK" for Android versions prior to 3.8.5.

MEDIUM 4.0EPSS 0.15%

Does this matter?

Lower severity and a low EPSS score (0.15%). Track it; it rarely justifies an emergency change on its own.

Description

Use of hard-coded cryptographic key issue exists in "Kura Sushi Official App Produced by EPARK" for Android versions prior to 3.8.5. If this vulnerability is exploited, a local attacker may obtain the login ID and password for the affected product.

CVSS 3.0: 4.0 MEDIUMCVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
EPSS: 0.15% probability · 5th percentile
CISA KEV: Not listed
Weakness: CWE-321
Source: vultures@jpcert.or.jp

References

https://jvn.jp/en/jp/JVN16114985/
https://play.google.com/store/apps/details?id=jp.co.kura_corpo

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.