CWE-1204: Generation of Weak Initialization Vector (IV)
The product uses a cryptographic primitive that uses an Initialization Vector (IV), but the product does not generate IVs that are sufficiently unpredictable or unique according to the expected cryptographic requirements for that primitive.
A kind of CWE-330 Use of Insufficiently Random Values.
From the CWE List. © The MITRE Corporation.
Newest
- switchbot lock, app, keypad +7 more +9 more Misuse and Misconfiguration of Cryptographic Algorithm in Bluetooth Communication 8.5 High
- jjnapiork pagi::middleware::session::store::cookie, pagi\ +1 more PAGI::Middleware::Session::Store::Cookie versions through 0.001003 for Perl generates random bytes insecurely 7.5 High
- strongswan strongman strongMan vulnerable to private credential recovery due to key and counter reuse 8.7 High
- mobatek mobaxterm Insecure storage of sensitive information in MobaXTerm <25.0. 6.5 Medium
- intel integrated performance primitives cryptography Generation of weak initialization vector in an Intel(R) IPP Cryptography software library before... 7.5 High
- silabs gecko software development kit, silabs.com gsdk +1 more Uninitialized IV in Silicon Labs SE FW v2.0.0 through v 2.2.1 for internally stored data 3.1 Low