CVE-2024-28285
A Fault Injection vulnerability in the SymmetricDecrypt function in cryptopp/elgamal.h of Cryptopp Crypto++ 8.9, allows an attacker to co-reside in the same system with a victim process to disclose...
Affects 0 products across 2 vendors.
Show all 21
Mapping is CWE-to-CAPEC per MITRE CAPEC 3.9.
A Fault Injection vulnerability in the SymmetricDecrypt function in cryptopp/elgamal.h of Crypto++ 8.9 allows an attacker to disclose information and escalate privileges by co-residing in the same system with a victim process.
BSID: BS-2024-GLOBAL-206407-C • Model: /workspace/models/qwen2.5-coder-32b-instruct-bf16 • Confidence: HIGH
Is this CVE in your environment?
BreachSpider monitors your ICS/OT environment for vulnerabilities like this one. No agents or network access required. Free to start.
Check My Environment →What is CVE-2024-28285?
What is the CVSS score for CVE-2024-28285?
Is CVE-2024-28285 actively exploited?
How do I remediate CVE-2024-28285?
What systems are affected by CVE-2024-28285?
| CVE ID | CVE-2024-28285 |
|---|---|
| BSID | BS-2024-GLOBAL-206407-C BreachSpider Global ID |
| CVSS Vector | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| Published | 2024-05-14 |
| Last Modified | 2026-04-15 |
| ICS Relevance | 0% |
| Weakness (CWE) | |
| Source | NVD |
A Fault Injection vulnerability in the SymmetricDecrypt function in cryptopp/elgamal.h of Cryptopp Crypto++ 8.9, allows an attacker to co-reside in the same system with a victim process to disclose information and escalate privileges.
Source: NIST NVD / MITRE CVE Database
The vulnerability is exploited through fault injection techniques, where an attacker can manipulate the execution environment to cause errors in the cryptographic operations, leading to information leakage and privilege escalation.
Exploitation Likelihood: CRITICAL
No patch URL on record. Monitor vendor security advisories directly.
| CISA KEV | Not in KEV catalog |
|---|---|
| Public Exploit | Not confirmed |
| PoC Code | Not confirmed |
SAGE Enrichment Record — provenance & audit hash
| Model | /workspace/models/qwen2.5-coder-32b-instruct-bf16 |
|---|---|
| Confidence | HIGH |
| Enriched At | 2026-05-24 |
| SHA-512 Audit Hash | e4a6936bce2c261aab67df9f186c0f9ca9eb394cb0a335edf41d16fd116874813f4ce6b2a652352b3515d4f55563245fa6c85a81bbf957f69f1143a840b1628c |
Critical Severity - Know Your Exposure
A CVSS 9.8 vulnerability in your ICS environment cannot wait. BreachSpider maps critical CVEs to your specific assets and tells you what to fix first.
Check Your Assets Free →