JVN#13306058: JINS MEME CORE uses a hard-coded cryptographic key

JINS MEME CORE provided by JINS Inc. is a nose pad type sensor attached to a glass frame. JINS MEME CORE uses a hard-coded cryptographic key (CWE-321).

Impact

A network-adjacent attacker may decrypt data acquired by a sensor of the affected product.

Solution

Update the firmware
Update the firmware to the latest version according to the information provided by the developer.

Products Affected

• JINS MEME CORE Firmware version 2.2.0 and earlier