CVE-2021-41096

Name: CVE-2021-41096
Creator: NVD / NIST
Published: 2021-09-27T20:15:07.337+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

HIGHCVSS 7.5/10EPSS 0.65%

Last modified Jun 17, 2026

CVE-2021-41096 is a high-severity vulnerability rated 7.5/10 on the CVSS scale. Rucky is a USB HID Rubber Ducky Launch Pad for Android. Versions 2.2 and earlier for release builds and versions 425 and earlier for nightly builds suffer from use of a weak cryptographic algorithm (RSA/ECB/PKCS1Padding). EPSS estimates a 0.65% chance of exploitation in the next 30 days.

Description

Rucky is a USB HID Rubber Ducky Launch Pad for Android. Versions 2.2 and earlier for release builds and versions 425 and earlier for nightly builds suffer from use of a weak cryptographic algorithm (RSA/ECB/PKCS1Padding). The issue will be patched in v2.3 for release builds and 426 onwards for nightly builds. As a workaround, one may disable an advance security feature if not required.

Metrics

CVSS 3.1

7.5/10

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS Probability

0.65%

46.3th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

CWE-327

Affected Software

Vendor	Product	Versions
Rucky Project	Rucky	<= 2.2

References

https://github.com/mayankmetha/Rucky/commit/5e3a477365009f488a73efd26a91168502de1b93Patch, Third Party Advisory
https://github.com/mayankmetha/Rucky/security/advisories/GHSA-32m7-456v-wgfwThird Party Advisory
https://github.com/mayankmetha/Rucky/commit/5e3a477365009f488a73efd26a91168502de1b93Patch, Third Party Advisory
https://github.com/mayankmetha/Rucky/security/advisories/GHSA-32m7-456v-wgfwThird Party Advisory

Timeline

Published: Sep 27, 2021
Last Modified: Jun 17, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2021-41096?

How severe is CVE-2021-41096?

CVE-2021-41096 has a CVSS score of 7.5/10 (HIGH severity). The EPSS model estimates a 0.65% probability of exploitation in the next 30 days.

How do I fix CVE-2021-41096?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2021-41096?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST