CVE-2023-43637

CVE-2023-43637 is a cryptographic vulnerability affecting lfedge eve, specifically in versions prior to 7.10. The issue stems from a flawed key derivation process where the last 16 bytes of the vault key were predictably set to "arfoobarfoobarfo", significantly weakening the key's strength. This vulnerability has a CVSS score of 7.8 (High), indicating a local attack vector with low complexity, and potential for high impact on confidentiality, integrity, and availability. While there is no evidence of active exploitation, public exploit code, or significant community discussion, the vulnerability persists in devices initialized before version 7.10, even after updating.