CVE-2020-14474 - CVE House
Back to Database
Status published High CVE-2020-14474

The Cellebrite UFED physical device 5.0 through 7.5.0.845 relies on...

Vulnerability Description

The Cellebrite UFED physical device 5.0 through 7.5.0.845 relies on key material hardcoded within both the executable code supporting the decryption process, and within the encrypted files themselves by using a key enveloping technique. The recovered key material is the same for every device running the same version of the software, and does not appear to be changed with each new build. It is possible to reconstruct the decryption process using the hardcoded key material and obtain easy access to otherwise protected data.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2020-14474

Credits & Attribution

No credits recorded in the NVD database.

References

More from cellebrite

View All →
CVE-2020-11723
Cellebrite UFED 5.0 through 7.29 uses four hardcoded RSA private...
Medium 5.5

Affected Vendor

Affected Software

ufed firmware
Vulnerable Versions:
5.0

Timeline

Official Publish: June 30th, 2020
Last Modified: August 4th, 2024
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.