CVE-2021-34687

2021-07-1513:17:34

mitre

www.cve.org

idrive

remotepc

windows

lan

connection

vulnerability

personal key

disclosure

cryptography

substitution cipher

AI Score

5.2

Confidence

High

EPSS

0.001

Percentile

21.6%

JSON

iDrive RemotePC before 7.6.48 on Windows allows information disclosure. A man in the middle can recover a system’s Personal Key when a client attempts to make a LAN connection. The Personal Key is transmitted over the network while only being encrypted via a substitution cipher.