Vulnerabilities > Impero

DATE CVE VULNERABILITY TITLE RISK
2015-09-14 CVE-2015-5998 Improper Authentication vulnerability in Impero Education PRO
Impero Education Pro before 5105 relies on the -1|AUTHENTICATE\x02PASSWORD string for authentication, which allows remote attackers to execute arbitrary programs via an encrypted command.
network
low complexity
impero CWE-287
critical
10.0
2015-09-14 CVE-2015-5997 Unspecified vulnerability in Impero Education PRO
Impero Education Pro before 5105 uses a hardcoded CBC key and initialization vector derived from a hash of the Imp3ro string, which makes it easier for remote attackers to obtain plaintext data by sniffing the network for ciphertext data.
network
low complexity
impero
7.8