CVE-2021-41096

    Dashboard / Vulnerabilities / CVE-2021-41096

    CVE-2021-41096

    Published: 27 Sept 2021Last Modified: 9 Jul 2026

    Summary:

    Details: Rucky is a USB HID Rubber Ducky Launch Pad for Android. Versions 2.2 and earlier for release builds and versions 425 and earlier for nightly builds suffer from use of a weak cryptographic algorithm (RSA/ECB/PKCS1Padding). The issue will be patched in v2.3 for release builds and 426 onwards for nightly builds. As a workaround, one may disable an advance security feature if not required.

    References: https://github.com/mayankmetha/Rucky/security/advisories/GHSA-32m7-456v-wgfw, https://github.com/mayankmetha/Rucky/commit/5e3a477365009f488a73efd26a91168502de1b93

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- 0
    Fixed -None

    Affected versions

    2.2

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2021-41096 | CVE-DB