{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-04-29T16:10:22.382","vulnerabilities":[{"cve":{"id":"CVE-2024-36496","sourceIdentifier":"551230f0-3615-47bd-b7cc-93e92e730bbf","published":"2024-06-24T09:15:09.860","lastModified":"2026-04-15T00:35:42.020","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The configuration file is encrypted with a static key derived from a \nstatic five-character password which allows an attacker to decrypt this \nfile. The application hashes this five-character password with \nthe outdated and broken MD5 algorithm (no salt) and uses the first five \nbytes as the key for RC4. The configuration file is then encrypted with \nthese parameters."},{"lang":"es","value":"El archivo de configuración está cifrado con una clave estática derivada de una contraseña estática de cinco caracteres que permite a un atacante descifrar este archivo. La aplicación codifica esta contraseña de cinco caracteres con el algoritmo MD5 obsoleto y roto (sin semilla) y utiliza los primeros cinco bytes como clave para RC4. Luego, el archivo de configuración se cifra con estos parámetros."}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":3.6}]},"weaknesses":[{"source":"551230f0-3615-47bd-b7cc-93e92e730bbf","type":"Secondary","description":[{"lang":"en","value":"CWE-798"}]}],"references":[{"url":"http://seclists.org/fulldisclosure/2024/Jun/12","source":"551230f0-3615-47bd-b7cc-93e92e730bbf"},{"url":"https://r.sec-consult.com/winselect","source":"551230f0-3615-47bd-b7cc-93e92e730bbf"},{"url":"https://www.faronics.com/en-uk/document-library/document/winselect-standard-release-notes","source":"551230f0-3615-47bd-b7cc-93e92e730bbf"},{"url":"http://seclists.org/fulldisclosure/2024/Jun/12","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://r.sec-consult.com/winselect","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.faronics.com/en-uk/document-library/document/winselect-standard-release-notes","source":"af854a3a-2127-422b-91ae-364da2661108"}]}}]}