CVE-2015-6032

High

Published: 31/10/2015(UTC)Translated: 16/06/2026(UTC)NVD NIST

Summary

Qolsys IQ Panel (aka QOL) before version 1.5.1 has hardcoded cryptographic keys, allowing remote attackers to create digital signatures for code by leveraging knowledge of a key from a different installation.

Risk Assessment

Exploitation of this vulnerability may lead to unauthorized access to the system and data manipulation, posing a serious security threat to the organization.

Recommendation

It is recommended to update the Qolsys IQ Panel to version 1.5.1 or later to remove hardcoded cryptographic keys and minimize risk.

Other vulnerabilities in Qolsys IQ Panel

CVE-2015-6033High
Qolsys IQ Panel (also known as QOL) before version 1.5.1 does not verify the digital signatures of software updates, allowing man-in-the-middle attackers to bypass intended access restrictions via a modified update.

Original NVD description (English source)

Qolsys IQ Panel (aka QOL) before 1.5.1 has hardcoded cryptographic keys, which allows remote attackers to create digital signatures for code by leveraging knowledge of a key from a different installation.