CVE-2022-34906 | BDVDB-2026-180902 Detail

Description#

A hard-coded cryptographic key is used in FileWave before 14.6.3 and 14.7.x before 14.7.2. Exploitation could allow an unauthenticated actor to decrypt sensitive information saved in FileWave, and even send crafted requests.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://kb.filewave.com/pages/viewpage.action?pageId=55544244
https://claroty.com/2022/07/25/blog-research-with-management-comes-risk-finding-flaws-in-filewave-mdm/

Exploit#

No public exploit known

History#

Version 12022-07-25Record published in the CVE List.
Version 22024-08-03Most recent update recorded in the CVE List.