CVE-2025-15016

CRITICAL

9.8

Description

Enterprise Cloud Database developed by Ragic has a Hard-coded Cryptographic Key vulnerability, allowing unauthenticated remote attackers to exploit the fixed key to generate verification information and log into the system as any user.

Details CVE

Score CVSS v3.19.8

SeveriteCRITICAL

Vecteur CVSSCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Vecteur d'attaqueNETWORK

ComplexiteLOW

Privileges requisNONE

Interaction utilisateurNONE

Publie12/22/2025

Derniere modification3/5/2026

Sourcenvd

Observations honeypot0

Produits affectes

ragic:enterprise_cloud_database

Faiblesses (CWE)

CWE-321

References

https://www.twcert.org.tw/en/cp-139-10588-771e5-2.html(twcert@cert.org.tw)

https://www.twcert.org.tw/tw/cp-132-10587-797c6-1.html(twcert@cert.org.tw)

Correlations IOC

Aucune correlation enregistree

This product uses data from the NVD API but is not endorsed or certified by the NVD.