Xtooltech Xtool_anyscan
4 CVEs affecting Xtooltech Xtool_anyscan. Latest disclosed: 2025-11-24. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-63434 | High | 8.8 | 2025-11-24 | The update mechanism in Xtooltech Xtool AnyScan Android Application 4.40.40 and prior is insecure. The application downloads and extracts update packages conta… |
CVE-2025-63433 | Medium | 4.6 | 2025-11-24 | Xtooltech Xtool AnyScan Android Application 4.40.40 and prior uses a hardcoded cryptographic key and IV to decrypt update metadata. The key is stored as a stat… |
CVE-2025-63432 | Medium | 4.6 | 2025-11-24 | Xtooltech Xtool AnyScan Android Application 4.40.40 and prior is Missing SSL Certificate Validation. The application fails to properly validate the TLS certifi… |
CVE-2025-63435 | Medium | 4.3 | 2025-11-24 | Xtooltech Xtool AnyScan Android Application 4.40.40 is Missing Authentication for Critical Function. The server-side endpoint responsible for serving update pa… |