PT-2025-34839 · Unknown · Editso Fuso

Dev03301 · Published 2025-08-27 · Updated 2025-08-27 · CVE-2025-9513

Positive Technologies (AI Summary)

CVSS v3.1

3.7

Low

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions: editso fuso versions up to 1.0.4-beta.7

Description: A flaw exists due to inadequate encryption strength caused by the manipulation of the priv key argument within the PenetrateRsaAndAesHandshake function located in the src/net/penetrate/handshake/mod.rs file. Remote exploitation is possible, but requires a high degree of complexity and is considered difficult to execute.

Recommendations: Versions prior to 1.0.4-beta.7: Address the inadequate encryption strength in the PenetrateRsaAndAesHandshake function by carefully validating and sanitizing the priv key argument. As a temporary workaround, consider restricting access to the PenetrateRsaAndAesHandshake function until a more permanent solution is implemented.

Fix

Inadequate Encryption Strength

Weakness Enumeration

CWE-310

CWE-326

Related Identifiers

CVE-2025-9513

Affected Products

Editso Fuso

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2025-9513 · Security Note
• https://chatgpt.com/share/68ae1bfa-8cd4-8005-8add-969bc42047b4 · Note
• https://t.me/CVEtracker/31011 · Telegram Post
• https://vuldb.com/?id.321506 · Note
• https://vuldb.com/?submit.635449 · Note
• https://twitter.com/CVEnew/status/1960580603499200568 · Twitter Post
• https://t.me/cveNotify/133658 · Telegram Post
• https://vuldb.com/?ctiid.321506 · Note