CVE-2007-5502
The PRNG implementation for the OpenSSL FIPS Object Module 1.1.1 does not perform auto-seeding...
The PRNG implementation for the OpenSSL FIPS Object Module 1.1.1 does not perform auto-seeding during the FIPS self-test, which generates random data that is more predictable than expected and makes it easier for attackers to bypass protection mechanisms that rely on the randomness.
Exploit likelihood
What each source reports
NVD Score used
The PRNG implementation for the OpenSSL FIPS Object Module 1.1.1 does not perform auto-seeding during the FIPS self-test, which generates random data that is more predictable than expected and makes it easier for attackers to bypass protection mechanisms that rely on the randomness.
- Record
CVE-2007-5502- CVSS 2.0
- 6.4 Medium
AV:N/AC:L/Au:N/C:P/I:P/A:N - Weakness
- CWE-310
- Updated
- 2026-11-02
CVE List No score
The PRNG implementation for the OpenSSL FIPS Object Module 1.1.1 does not perform auto-seeding during the FIPS self-test, which generates random data that is more predictable than expected and makes it easier for attackers to bypass protection mechanisms that rely on the randomness.
- Record
CVE-2007-5502- Updated
- 2026-11-02
EUVDEUVD-2007-5477 No score
The PRNG implementation for the OpenSSL FIPS Object Module 1.1.1 does not perform auto-seeding during the FIPS self-test, which generates random data that is more predictable than expected and makes it easier for attackers to bypass protection mechanisms that rely on the randomness.
- Record
EUVD-2007-5477- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-r3wh-w6m7-m5c3 No score
The PRNG implementation for the OpenSSL FIPS Object Module 1.1.1 does not perform auto-seeding...
The PRNG implementation for the OpenSSL FIPS Object Module 1.1.1 does not perform auto-seeding during the FIPS self-test, which generates random data that is more predictable than expected and makes it easier for attackers to bypass protection mechanisms that rely on the randomness.
- Record
GHSA-r3wh-w6m7-m5c3- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| aliases, references, title | GitHub Advisories | |
| first indexed | CVE List, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-5502 is a medium vulnerability (CVSS 6.4) in Openssl Fips Object Module, published December 1, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.31%, the 83rd percentile. No source names a fixed version.
References
vupen.com/english/advisories/2007/4044
securityfocus.com/bid/26652
securitytracker.com/id?1019029
openssl.org/news/secadv_20071129.txt
secunia.com/advisories/27859
exchange.xforce.ibmcloud.com/vulnerabilities/38796
kb.cert.org/vuls/id/150249
nvd.nist.gov/vuln/detail/CVE-2007-5502
github.com/advisories/GHSA-r3wh-w6m7-m5c3