Every CVE Search/ Get API key

CVE-2015-6032

Qolsys IQ Panel (aka QOL) before 1.5.1 has hardcoded cryptographic keys, which allows remote...

9.3 High

Qolsys IQ Panel (aka QOL) before 1.5.1 has hardcoded cryptographic keys, which allows remote attackers to create digital signatures for code by leveraging knowledge of a key from a different installation.

Exploit likelihood

3.28%Up 2.2 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 9.3

Qolsys IQ Panel (aka QOL) before 1.5.1 has hardcoded cryptographic keys, which allows remote attackers to create digital signatures for code by leveraging knowledge of a key from a different installation.

Record
CVE-2015-6032
CVSS 2.0
9.3 HighAV:N/AC:M/Au:N/C:C/I:C/A:C
Weakness
CWE-255
Updated
2026-11-02
CVE List No score

Qolsys IQ Panel (aka QOL) before 1.5.1 has hardcoded cryptographic keys, which allows remote attackers to create digital signatures for code by leveraging knowledge of a key from a different installation.

Record
CVE-2015-6032
Updated
2026-11-02
EUVDEUVD-2015-5975 No score

Qolsys IQ Panel (aka QOL) before 1.5.1 has hardcoded cryptographic keys, which allows remote attackers to create digital signatures for code by leveraging knowledge of a key from a different installation.

Record
EUVD-2015-5975
Updated
2026-11-03
GitHub AdvisoriesGHSA-7w76-g22v-gxpg No score

Qolsys IQ Panel (aka QOL) before 1.5.1 has hardcoded cryptographic keys, which allows remote...

Qolsys IQ Panel (aka QOL) before 1.5.1 has hardcoded cryptographic keys, which allows remote attackers to create digital signatures for code by leveraging knowledge of a key from a different installation.

Record
GHSA-7w76-g22v-gxpg
Updated
2026-11-02

Affected products

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2015-6032 is a high vulnerability (CVSS 9.3) in Qolsys Iq Panel, published October 31, 2015. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.28%, the 88th percentile. No source names a fixed version.

References

MoveEnter Open