CVE-2018-15753

HIGH

MensaMax 4.3 - Use of Hard-coded DES Cryptographic Key

Title source: llm

Description

An issue was discovered in the MensaMax (aka com.breustedt.mensamax) application 4.3 for Android. The use of a Hard-coded DES Cryptographic Key allows an attacker who decodes the application to decrypt transmitted data such as the login username and password.

References (2)

Core 2

Core References

Exploit, Third Party Advisory x_refsource_misc

https://advisories.e2security.de/2018/E2SA-2018-01.txt

Exploit, Mailing List, Third Party Advisory mailing-list x_refsource_bugtraq

https://seclists.org/bugtraq/2018/Oct/3

Scores

CVSS v3 7.5

EPSS 0.0133

EPSS Percentile 67.3%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Details

CWE

CWE-798

Status published

Products (1)

mensamax/mensamax 4.3

Published Oct 02, 2018

Tracked Since Feb 18, 2026