CVE-2025-31362 Details
Description
Use of hard-coded cryptographic key issue exists in BizRobo! all versions. Credentials inside robot files may be obtained if the encryption key is available. The vendor provides the workaround information and recommends to apply it to the deployment environment.
A vulnerability exists in all versions of BizRobo! due to the use of a hard-coded cryptographic key. This issue allows for the potential decryption of credentials stored in robot files, as they are encrypted with the same single key. The vulnerability could be exploited if the encryption key is obtained.
The vendor recommends applying the provided workaround information to the deployment environment.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Apr 11, 2025CISA-ADP
Assessed Apr 11, 2025References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://jvn.jp/en/jp/JVN30641875/ | [email protected] | AdvisoryBundleRemedy |
| https://knowledge.bizrobo.com/hc/ja/articles/360029772271 | [email protected] | Vendor |
| https://knowledge.bizrobo.com/hc/ja/articles/39951710517145 | [email protected] | AdvisoryRemedyVendor |
| https://knowledge.bizrobo.com/hc/ja/articles/39952052043289 | [email protected] | ExploitTechnical DescriptionVendor |
| https://knowledge.bizrobo.com/hc/ja/articles/39953373809305 | [email protected] | ExploitTechnical DescriptionVendor |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-321 | Use of Hard-coded Cryptographic Key | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| OPEN BizRobo! | All versions |
CPE
Remediation
| |
| OPEN DesignStudio | All versions |
CPE
Remediation
| |
| OPEN Management Console | All versions |
CPE
Remediation
| |
Change History
3 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Apr 11, 2025 | New CVE Received | [email protected] |