PT-2025-20413 · Unknown · P73 Simplepythonencryption.Py

Shashikantsingh09 · Published 2025-05-08 · Updated 2025-05-08 · CVE-2025-46833

Positive Technologies (AI Summary)

CVSS v4.0

4.6

Medium

Base vector

AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U

Name of the Vulnerable Software and Affected Versions Programs/P73 SimplePythonEncryption.py versions prior to commit 6ce60b1

Description The issue affects a Python encryption example using the RSA Algorithm, allowing an attacker to potentially decrypt data using brute force attacks, which can impact the whole application.

Recommendations For versions prior to commit 6ce60b1, consider increasing the key size to at least 2048 bits for RSA or DSA, or at least 256 bits for ECC as a workaround until the patched version can be applied. Update to a version that includes the patch from commit 6ce60b1 to fully resolve the issue.

Exploit

Fix

Inadequate Encryption Strength

Weakness Enumeration

CWE-326

Related Identifiers

CVE-2025-46833

GHSA-5H26-2C6G-4CH4

Affected Products

P73 Simplepythonencryption.Py

References · 9

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/46xxx/CVE-2025-46833.json · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-46833 · Security Note
• https://osv.dev/vulnerability/CVE-2025-46833 · Vendor Advisory
• https://github.com/ShashikantSingh09/python-progrrames/security/advisories/GHSA-5h26-2c6g-4ch4 · Note
• https://twitter.com/VulmonFeeds/status/1920615746024902839 · Twitter Post
• https://t.me/cvetracker/23399 · Telegram Post
• https://github.com/ShashikantSingh09/python-progrrames/commit/6ce60b1b2116a579a2e89de96d738a98f6ad4f27 · Note
• https://twitter.com/CVEnew/status/1920595163933782207 · Twitter Post
• https://t.me/cvedetector/24859 · Telegram Post