CVE-2005-4002

N/A Unknown

Published: December 05, 2005 Modified: April 16, 2026

Description

WebEOC before 6.0.2 uses the same secret key for all installations, which allows attackers with the key to decrypt data from any WebEOC installation.

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

Patch Vendor Advisory Exploit Third Party Advisory

Source: cve@mitre.org

Patch Third Party Advisory US Government Resource

Source: af854a3a-2127-422b-91ae-364da2661108

Patch Third Party Advisory US Government Resource

2 reference(s) from NVD

CVSS v3 Score

N/A / 10.0

EPSS (Exploit Probability)

0.4%

59th percentile

Exploitation Status

Not in CISA KEV

esi_products