CVE-2015-2077: Komodia Redirector SDK

Medium severity, CVSS 5.0. EPSS: 2.6% chance of exploitation in the next 30 days.

The SDK for Komodia Redirector with SSL Digestor, as used in Lavasoft Ad-Aware Web Companion 1.1.885.1766 and Ad-Aware AdBlocker (alpha) 1.3.69.1, Qustodio for Windows, Atom Security, Inc. StaffCop 5.8, and other products, uses the same X.509 certificate private key for a root CA certificate across different customers' installations, which makes it easier for man-in-the-middle attackers to spoof SSL servers by leveraging knowledge of this key, as originally reported for Superfish VisualDiscovery on certain Lenovo Notebook laptop products.

Affected products

• Komodia Redirector SDK: affected versions not specified

Published 2015-02-24. Last modified 2026-06-17.