Vulnerability in Tohoku Electric Power Company, Incorporated Tohoku Electric Power "Yorisou e Net" Android App

[ Description ]Official description

Smartphone application Tohoku Electric Power "Yorisou e Net" uses a hard-coded cryptographic key, which may allow an attacker to retrieve a hard-coded cryptographic key from the affected product.

[ Fixes ]Fixes and patches

No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.

[ References ]References

• apps.apple.com/jp/app/%E6%9D%B1%E5%8C%97%E9%9B%BB%E5%8A%9B-%E3%82%88%E3%82%8A%E3%81%9D%…
• jvn.jp/en/jp/JVN93985674
• play.google.com/store/apps/details