Vulnerability · Published Mar 28, 2025 · Assigned by CERT-PL

CVE-2024-7407Weak password encoding in Streamsoft Prestiż

High 8.2

In plain English

A high-severity security flaw in Streamsoft Prestiż from Streamsoft. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 36% of all known vulnerabilities).

Severity (CVSS 4.0)8.2High

Exploit odds (30 days)0.4%top 64.5% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

Use of a custom password encoding algorithm in Streamsoft Prestiż software allows straightforward decoding of passwords using their encoded forms, which are stored in the application's database. One has to know the encoding algorithm, but it can be deduced by observing how password are transformed. This issue was fixed in 18.2.377 version of the software.

Affected products (as reported)

Vendor	Product	Versions
Streamsoft	Streamsoft Prestiż	0 – before 18.2.377

Weakness: CWE-261 · Vector: CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

References

https://cert.pl/en/posts/2025/03/CVE-2024-7407/ third-party-advisory
https://www.streamsoft.pl/streamsoft-prestiz/ product