CVE-2025-9513 MEDIUM

CVE-2025-9513: editso fuso mod.rs PenetrateRsaAndAesHandshake inadequate encryption

Vendor Editso
Product fuso
Weakness CWE-326 · Weak encryption
Published August 27, 2025
Last update August 28, 2025
View on NVD All CVEs

CVSS base score

6.3/10
Attack vector Network
Attack complexity High
Privileges required None
User interaction None
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X

What the vulnerability does

01Description

A flaw has been found in editso fuso up to 1.0.4-beta.7. This affects the function PenetrateRsaAndAesHandshake of the file src/net/penetrate/handshake/mod.rs. This manipulation of the argument priv_key causes inadequate encryption strength. Remote exploitation of the attack is possible. A high degree of complexity is needed for the attack. The exploitability is reported as difficult.

Key dates

02Disclosure timeline

August 27, 2025 CVE published
August 28, 2025 Record updated