Hard-coded Cryptographic Secret Vulnerability in WolfVision Cynap
CVE-2019-13352

9.8CRITICAL

Key Information:

Vendor: Wolfvision
Status: Cynap
Vendor: CVE Published:; 5 July 2019

What is CVE-2019-13352?

WolfVision Cynap, prior to version 1.30j, contains a critical vulnerability due to the use of a static, hard-coded cryptographic secret. This design flaw enables attackers to discover the secret and exploit it to generate support PINs for the 'forgot password' feature. By leveraging this static secret along with the algorithm used for PIN generation, an attacker can successfully reset the ADMIN password, potentially gaining unauthorized remote access to the device.