CWE-323: Reusing a Nonce, Key Pair in Encryption
Nonces should be used for the present occasion and only once.
A kind of CWE-344 Use of Invariant Value in Dynamically Changing Context.
From the CWE List. © The MITRE Corporation.
Newest
- nlnet labs krill Krill login-session tokens reuse their encryption nonce across restarts, so any user who can log in can forge an "admin" token 8.4 High
- legion of the bouncy castle inc. bc-lts-java Packet CTR reports a full success length after the counter is exhausted 8.2 High
- zephyrproject zephyr AEAD nonce reuse in Zephyr secure_storage ITS default nonce provider due to missing thread synchronization 5.3 Medium
- wolfssl wolfengine wolfEngine reuses the AES-CCM nonce on TLS 1.2 / DTLS 1.2 records 6.5 Medium
- wolfssl wolfengine wolfEngine reuses the AES-GCM nonce on every TLS 1.2 / DTLS 1.2 record 7.4 High
- wolfssl wolfprovider wolfProvider reuses the AES-GCM nonce on every TLS 1.2 / DTLS 1.2 record 7.4 High
- fbeta-gmbh epa3-service-opensource ePA 3.x Integration: AES-GCM Nonce Reuse via Frozen VAU Request Counter 7.4 High
- kong event gateway Kong Event Gateway AES-GCM nonce reuse due to missing key rotation enforcement 2.3 Low
- qualcomm fastconnect 6900 firmware, fastconnect 7800 firmware, lemans au lgit firmware +51 more +53 more Reusing a Nonce, Key Pair in Encryption in HLOS 7.1 High
- apereo cas Apereo CAS 7.3.0 < 8.0.0-RC6 - AES-GCM Nonce Reuse Information Disclosure 9.3 Critical
- pretix, pretix pretix-bitpay, pretix-mollie +5 more +7 more Session takeover vulnerability 7.7 High
- wolfssl AES-GCM streaming APIs do not reject >64 GiB cumulative single messages, enabling counter wrap and keystream reuse 2.0 Low
- timlegge crypt::dsa Crypt::DSA versions before 1.21 for Perl reused the nonce across signatures, leading to private-key recovery 9.1 Critical
- discuz! x5.0 Discuz! X5.0 Authentication Bypass via dbbak.php Encryption Oracle 9.3 Critical
- imagemagick ImageMagick - Information Disclosure via AES-CTR Nonce Reuse in PasskeyEncipherImage 6.3 Medium
- astro Astro: Server island encrypted parameters vulnerable to cross-component replay 2.9 Low
- legion of the bouncy castle inc. bc-java, red hat cryostat 4, openshift developer tools and services +44 more +46 more GOSTCTR implementation unable to process more than 255 blocks correctly 9.3 Critical
- wolfssl wolfSSL ARIA-GCM TLS 1.2/DTLS 1.2 GCM nonce reuse 6.0 Medium
- philips hue bridge, hue bridge v2 firmware +1 more Philips Hue Bridge HomeKit Accessory Protocol Static Nonce Authentication Bypass Vulnerability 8.1 High
- gnome libsoup, red hat enterprise linux 10, enterprise linux 6 +4 more +6 more Libsoup: libsoup: authentication bypass via digest authentication replay attack 5.8 Medium
- rustdesk, rustdesk-client rustdesk client +1 more RustDesk Encrypts Local Passwords with World-Readable Machine ID and Fixed Zero Nonce (XSalsa20-Poly1305) 8.2 High
- strongswan strongman strongMan vulnerable to private credential recovery due to key and counter reuse 8.7 High
- hcl software myxalytics Improper management of a static JWT signing secret in the web application, where the secret lacks rotation , introducing a security risk 7.4 High
- qualcomm ar8035 firmware, fastconnect 6200 firmware, fastconnect 6700 firmware +103 more +105 more Reusing a Nonce, Key Pair in Encryption in Automotive Platform 8.4 High
- johnson controls iq panels2, 2+, iqhub, iqpanel 4, powerg Johnson Controls IQ Panels2, 2+, IQHub, IQPanel 4, PowerG reusing a nonce, key pair in encryption 7.2 High
- dajiaji hpke-js hpke-js reuses AEAD nonces 9.1 Critical
- tenda rx2 pro firmware Initialization vector (IV) reuse in the web management portal of the Tenda RX2 Pro 16.03.30.14... 6.5 Medium
- w1.fi hostapd, siemens sidis secured smartplug +1 more In hostapd 2.10 and earlier, the PKEX code remains active even after a successful PKEX... 6.5 Medium
- sick ag inspectorp61x, inspectorp62x +1 more SICK InspectorP61x and SICK InspectorP62x are vulnerable for a replay attack 5.6 Medium
- akshudev pheonixappapi PheonixAppAPI has visible Encoding Maps 4.4 Medium
- freefrom k.k. "freefrom - the nostr client" app for android, "freefrom - the nostr client" app for ios, freefrom kk the nostr client app +2 more Reusing a nonce, key pair in encryption issue exists in "FreeFrom - the nostr client" App... 5.3 Medium
- netty netty-incubator-codec-ohttp netty-incubator-codec-ohttp's BoringSSLAEADContext Repeats Nonces 5.9 Medium
- esri arcgis enterprise, portal for arcgis +1 more Portal for ArcGIS has an invalid authentication vulnerability 8.5 High
- sciener kontrol lux, ttlock app +1 more CVE-2023-7003 6.8 Medium
- etsi tetra standard, midnightblue tetra\ +1 more Keystream recovery for arbitrary frames in TETRA 8.8 High
- cocoon Sequential calls of encryption API (`encrypt`, `wrap`, and `dump`) result in nonce reuse 4.5 Medium
- hashicorp vault, vault enterprise +1 more Vault's Transit Secrets Engine Allowed Nonce Specified without Convergent Encryption 6.8 Medium
- discourse Discourse CSP nonce reuse vulnerability for anonymous users 6.8 Medium
- nextcloud desktop, kiteworks security-advisories +1 more Nextcloud Desktop: Initialization vector reuse in E2EE allows malicious server admin to break, manipulate, access files 6.7 Medium
- fedoraproject fedora, openidc mod auth openidc +1 more Hardcoded static IV and AAD with a reused key in AES GCM encryption in mod_auth_openidc 5.9 Medium
- consensys discovery Consensys Discovery Nonce Reuse 5.3 Medium
- ceph, redhat ceph storage, openshift +2 more +4 more A vulnerability was found in Red Hat Ceph Storage 4 and Red Hat Openshift Container Storage 4.2... 6.4 Medium
- jenkins Inbound TCP Agent Protocol/3 authentication bypass in Jenkins 8.6 High
- johnson controls metasys versions prior to 9.0, johnsoncontrols metasys system +1 more Metasys use of shared RSA key pairs 6.8 Medium
- wi-fi alliance protected access (wpa and wpa2), canonical ubuntu linux, debian linux +10 more +12 more Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Station-To-Station-Link (STSL)... 6.8 Medium
- wi-fi alliance protected access (wpa and wpa2), canonical ubuntu linux, debian linux +10 more +12 more Wi-Fi Protected Access (WPA and WPA2) that support 802.11v allows reinstallation of the Integrity... 5.3 Medium
- wi-fi alliance protected access (wpa and wpa2), canonical ubuntu linux, debian linux +10 more +12 more Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Tunneled Direct-Link Setup ... 6.8 Medium
- wi-fi alliance protected access (wpa and wpa2), canonical ubuntu linux, debian linux +10 more +12 more Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11r allows reinstallation of the... 8.1 High
- wi-fi alliance protected access (wpa and wpa2), canonical ubuntu linux, debian linux +10 more +12 more Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11w allows reinstallation of the... 5.3 Medium
- wi-fi alliance protected access (wpa and wpa2), canonical ubuntu linux, debian linux +10 more +12 more Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Group Temporal Key (GTK)... 5.3 Medium
- Show olderLoading…