CVE-2022-25577

PoC —

CVSS 3.1

9.1 critical

EPSS

1%p67

Published

Mar 25, 2022 (Mar 25, 2022)

Modified

Jun 17, 2026

Description

ALF-BanCO v8.2.5 and below was discovered to use a hardcoded password to encrypt the SQLite database containing the user's data. Attackers who are able to gain remote or local access to the system are able to read and modify the data.

Vendors: alf-banco
Products: alf-banco
Weakness: CWE-798
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (1.2%)

In the news0 stories

No ingested article mentions this CVE yet.