{"id":"CVE-2024-52614","aliases":["EUVD-2024-46027","GHSA-c75c-g472-c3qh"],"status":"published","title":"Use of hard-coded cryptographic key issue exists in \"Kura Sushi Official App Produced by EPARK\"...","description":"Use of hard-coded cryptographic key issue exists in \"Kura Sushi Official App Produced by EPARK\" for Android versions prior to 3.8.5. If this vulnerability is exploited, a local attacker may obtain the login ID and password for the affected product.","severity":{"version":"3.0","score":4,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.00153,"percentile":0.0451,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-321"],"published":"2024-11-20T05:12:41Z","modified":"2026-06-17T08:07:32Z","products":[{"vendor":"epark, inc.","product":"kura sushi official app produced by epark"}],"references":[{"url":"https://play.google.com/store/apps/details?id=jp.co.kura_corpo"},{"url":"https://jvn.jp/en/jp/JVN16114985/"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-52614"},{"url":"https://jvn.jp/en/jp/JVN16114985"},{"url":"https://github.com/advisories/GHSA-c75c-g472-c3qh"}],"sources":{"cve":[{"id":"CVE-2024-52614","description":"Use of hard-coded cryptographic key issue exists in \"Kura Sushi Official App Produced by EPARK\" for Android versions prior to 3.8.5. If this vulnerability is exploited, a local attacker may obtain the login ID and password for the affected product.","status":"published","published":"2024-11-20T05:12:41.41Z","modified":"2024-11-20T15:16:27.641Z","cvss":[{"version":"3.0","score":4,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"cna"}],"cwes":["CWE-321"],"updated_at":"2026-11-02T14:34:03.333404Z"}],"euvd":[{"id":"EUVD-2024-46027","description":"Use of hard-coded cryptographic key issue exists in \"Kura Sushi Official App Produced by EPARK\" for Android versions prior to 3.8.5. If this vulnerability is exploited, a local attacker may obtain the login ID and password for the affected product.","status":"published","published":"2024-11-20T05:12:41Z","modified":"2024-11-20T15:16:27Z","cvss":[{"version":"3.0","score":4,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-03T00:04:54.7374Z"}],"ghsa":[{"id":"GHSA-c75c-g472-c3qh","title":"Use of hard-coded cryptographic key issue exists in \"Kura Sushi Official App Produced by EPARK\"...","description":"Use of hard-coded cryptographic key issue exists in \"Kura Sushi Official App Produced by EPARK\" for Android versions prior to 3.8.5. If this vulnerability is exploited, a local attacker may obtain the login ID and password for the affected product.","status":"published","published":"2024-11-20T06:30:32Z","modified":"2024-11-20T06:30:38Z","cvss":[{"version":"3.0","score":4,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"cwes":["CWE-321"],"updated_at":"2026-11-02T14:58:53.680904Z"}],"nvd":[{"id":"CVE-2024-52614","description":"Use of hard-coded cryptographic key issue exists in \"Kura Sushi Official App Produced by EPARK\" for Android versions prior to 3.8.5. If this vulnerability is exploited, a local attacker may obtain the login ID and password for the affected product.","status":"published","published":"2024-11-20T06:15:16.023Z","modified":"2026-06-17T08:07:32.48Z","cvss":[{"version":"3.0","score":4,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-321"],"updated_at":"2026-11-02T14:10:37.632431Z"}]}}