Every CVESearch/Get API key

CVE-2015-6032

Qolsys IQ Panel (aka QOL) before 1.5.1 has hardcoded cryptographic keys, which allows remote...

9.3 High

Qolsys IQ Panel (aka QOL) before 1.5.1 has hardcoded cryptographic keys, which allows remote attackers to create digital signatures for code by leveraging knowledge of a key from a different installation.

Exploit likelihood

3.28%Up 2.2 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used9.3

Qolsys IQ Panel (aka QOL) before 1.5.1 has hardcoded cryptographic keys, which allows remote attackers to create digital signatures for code by leveraging knowledge of a key from a different installation.

Record
CVE-2015-6032
CVSS 2.0
9.3 HighAV:N/AC:M/Au:N/C:C/I:C/A:C
Weakness
CWE-255
Updated
2026-11-02
CVE ListNo score

Qolsys IQ Panel (aka QOL) before 1.5.1 has hardcoded cryptographic keys, which allows remote attackers to create digital signatures for code by leveraging knowledge of a key from a different installation.

Record
CVE-2015-6032
Updated
2026-11-02
EUVDEUVD-2015-5975No score

Qolsys IQ Panel (aka QOL) before 1.5.1 has hardcoded cryptographic keys, which allows remote attackers to create digital signatures for code by leveraging knowledge of a key from a different installation.

Record
EUVD-2015-5975
Updated
2026-11-03
GitHub AdvisoriesGHSA-7w76-g22v-gxpgNo score

Qolsys IQ Panel (aka QOL) before 1.5.1 has hardcoded cryptographic keys, which allows remote...

Qolsys IQ Panel (aka QOL) before 1.5.1 has hardcoded cryptographic keys, which allows remote attackers to create digital signatures for code by leveraging knowledge of a key from a different installation.

Record
GHSA-7w76-g22v-gxpg
Updated
2026-11-02

Affected products

History

History
RecordedChangedSources
facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2015-6032 is a high vulnerability (CVSS 9.3) in Qolsys Iq Panel, published October 31, 2015. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.28%, the 88th percentile. No source names a fixed version.

References

MoveEnter Open