high7.5
CVE-2022-26660
RunAsSpc 4.0 uses a universal and recoverable encryption key.
Impact
RunAsSpc 4.0 uses a universal and recoverable encryption key. In possession of a file encrypted by RunAsSpc, an attacker can recover the credentials that were used.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Robotronic | Runasspc | Version 4.0.0.0 |