{"id":"CVE-2025-31362","state":"PUBLISHED","title":"Use of hard-coded cryptographic key issue exists in BizRobo! all versions. Credentials inside robot files may be obtained if the encryption key is available.\r","description":"Use of hard-coded cryptographic key issue exists in BizRobo! all versions. Credentials inside robot files may be obtained if the encryption key is available.\r\nThe vendor provides the workaround information and recommends to apply it to the deployment environment.","publishedAt":"2025-04-11T09:38:43.242Z","updatedAt":"2025-04-11T14:36:44.148Z","severity":{"score":3.7,"label":"Low","version":"3.0","vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","source":"jpcert"},"assigner":"jpcert","products":["OPEN, Inc. BizRobo!"],"affected":[{"vendor":"OPEN, Inc.","product":"BizRobo!","versions":[{"version":"all versions","status":"affected"}]}],"references":["https://knowledge.bizrobo.com/hc/ja/articles/39951710517145","https://knowledge.bizrobo.com/hc/ja/articles/39952052043289","https://knowledge.bizrobo.com/hc/ja/articles/39953373809305","https://knowledge.bizrobo.com/hc/ja/articles/360029772271","https://jvn.jp/en/jp/JVN30641875/"],"weaknesses":["CWE-321"],"ingestedAt":"2026-10-29T20:08:55.257Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2025/31xxx/CVE-2025-31362.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2025-31362","state":"PUBLISHED","datePublished":"2025-04-11T09:38:43.242Z","dateUpdated":"2025-04-11T14:36:44.148Z","assignerShortName":"jpcert","assignerOrgId":"ede6fdc4-6654-4307-a26d-3331c018e2ce","dateReserved":"2025-04-02T01:34:56.875Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"Use of hard-coded cryptographic key issue exists in BizRobo! all versions. Credentials inside robot files may be obtained if the encryption key is available.\r\nThe vendor provides the workaround information and recommends to apply it to the deployment environment."}],"affected":[{"vendor":"OPEN, Inc.","product":"BizRobo!","versions":[{"version":"all versions","status":"affected"}]}],"references":[{"url":"https://knowledge.bizrobo.com/hc/ja/articles/39951710517145"},{"url":"https://knowledge.bizrobo.com/hc/ja/articles/39952052043289"},{"url":"https://knowledge.bizrobo.com/hc/ja/articles/39953373809305"},{"url":"https://knowledge.bizrobo.com/hc/ja/articles/360029772271"},{"url":"https://jvn.jp/en/jp/JVN30641875/"}],"metrics":[{"format":"CVSS","scenarios":[{"lang":"en-US","value":"GENERAL"}],"cvssV3_0":{"version":"3.0","baseSeverity":"LOW","baseScore":3.7,"vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-321","description":"Use of hard-coded cryptographic key","lang":"en-US","type":"CWE"}]}],"providerMetadata":{"shortName":"jpcert","orgId":"ede6fdc4-6654-4307-a26d-3331c018e2ce","dateUpdated":"2025-04-11T09:38:43.242Z"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2025-04-11T14:36:14.079306Z","id":"CVE-2025-31362","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-04-11T14:36:44.148Z"}}]}}}