Is CVE-2024-45165 actively exploited?

No active exploitation of CVE-2024-45165 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2024-45165 be exploited remotely?

Partially. CVE-2024-45165 requires adjacent network access (same network segment) to exploit.

What is the CVSS score of CVE-2024-45165?

CVE-2024-45165 has a CVSS score of 5.3 (MEDIUM).

HOME VULNERABILITIESCVE-2024-45165

MEDIUM

CVE-2024-45165

CWE-798Published: August 22, 2024· Updated: Jun 17, 2026

5.3

CVSS v3.1

Official Description

An issue was discovered in UCI IDOL 2 (aka uciIDOL or IDOL2) through 2.12. Data is sent between client and server with encryption. However, the key is derived from the string "(c)2007 UCI Software GmbH B.Boll" (without quotes). The key is both static and hardcoded. With access to messages, this results in message decryption and encryption by an attacker. Thus, it enables passive and active man-in-the-middle attacks.

NVD Source

Technical Analysis

CVE-2024-45165 requires adjacent network access, limiting remote exploitation but still posing risk in shared or local network environments.

The vulnerability requires no privileges and no user interaction, making it a prime target for automated exploitation campaigns and worm-like propagation.

A successful exploit results in complete confidentiality breach (data exposure), with a CVSS base score of 5.3.