CVE-2025-58426

Summary

desknet's NEO V4.0R1.0 to V9.0R2.0 contains a hard-coded cryptographic key, which allows an attacker to create malicious AppSuite applications.

Affected Software

VendorProductVersion RangeStatus
NEOJAPAN Inc.desknet’s NEOV4.0R1.0 to V9.0R2.0affected

Weaknesses

  • CWE-321: Use of hard-coded cryptographic key

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References