CVE-2020-25493

PoC —

CVSS 3.1

7.5 high

EPSS

<1%p58

Published

Feb 11, 2021 (Feb 11, 2021)

Modified

Jul 9, 2026

Description

Oclean Mobile Application 2.1.2 communicates with an external website using HTTP so it is possible to eavesdrop the network traffic. The content of HTTP payload is encrypted using XOR with a hardcoded key, which allows for the possibility to decode the traffic.

Vendors: oclean
Products: oclean
Weakness: CWE-327, CWE-798
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.9%)

In the news0 stories

No ingested article mentions this CVE yet.