The deriveVaultKey function calls retrieveCloudKey which always returns "foobarfoobarfoobarfoobarfoobarfo". When merged with the randomly generated 32-byte key using mergeKeys (16 bytes from each), the last 16 bytes are always "arfoobarfoobarfo". This enables an attacker with physical access to the EVE-OS device to attempt to brute force the remaining 128 bits of key.
Fixed in 7.10 and 8.12.1-lts
None
0.0.0-20220310190112-c0c966dc31e2Exploitability
AV:PAC:HPR:LUI:NScope
S:CImpact
C:HI:HA:N6.7/CVSS:3.1/AV:P/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N