CWE-326: Inadequate Encryption Strength
The product stores or transmits sensitive data using an encryption scheme that is theoretically sound, but is not strong enough for the level of protection required.
A kind of CWE-693 Protection Mechanism Failure.
From the CWE List. © The MITRE Corporation.
Newest
- tibco datasynapse gridserver managerTIBCO DataSynapse GridServer improper use of encryption6.8 Medium
- ibm rational focal pointIBM Rational Focal Point 6.4.0, 6.4.1, 6.5.1, 6.5.2, and 6.6.0 use a weak algorithm to hash...5.3 Medium
- fortinet forticlient, forticlient for windows, forticlient sslvpn client +2 more +4 moreUsers' VPN authentication credentials are unsafely encrypted in Fortinet FortiClient for Windows...7.5 High
- ibm rational team concert, rational collaborative lifecycle management +1 moreIBM Team Concert (RTC) 5.0, 5.0.1, 5.0.2, 6.0, 6.0.1, 6.0.2, 6.0.3, 6.0.4, and 6.0.5 stores...8.8 High
- ibm security access manager, security access manager firmware, security access manager for mobile +1 more +3 moreIBM Security Access Manager Appliance 8.0.0 through 8.0.1.6 and 9.0.0 through 9.0.3.1 uses weaker...7.5 High
- schneider electric se modicon premium, modicon quantum, modicon m340, bmxnor0200, schneider-electric 140cpu31110 firmware, 140cpu31110c firmware +55 more +57 moreVulnerable hash algorithms exists in Schneider Electric's Modicon Premium, Modicon Quantum,...9.8 Critical
- mcafee network security management (nsm), network security manager +1 moreSB10192 - Network Security Management (NSM) - Cryptanalysis vulnerability8.2 High
- ibm bigfix remote controlIBM BigFix Remote Control before Interim Fix pack 9.1.2-TIV-IBRC912-IF0001 makes it easier for...4.8 Medium
- ibm rational collaborative lifecycle management, rational doors next generation, rational engineering lifecycle manager +5 more +7 moreIBM Rational Collaborative Lifecycle Management (CLM) 4.0.x before 4.0.7 iFix10, 5.0.x before 5.0...3.3 Low
- siemens digsi 4, en100 ethernet module dnp3 variant, en100 ethernet module iec 104 variant +20 more +22 moreA vulnerability has been identified in DIGSI 4 (All versions < V4.92), EN100 Ethernet module DNP3...5.3 Medium
- belden hirschmann m1-8mm-sc, hirschmann m1-8sfp, hirschmann m1-8sm-sc +131 more +133 moreAn Inadequate Encryption Strength issue was discovered in Belden Hirschmann RS, RSR, RSB, MACH100...6.5 Medium
- google android, nvidia shield tv, shield tv firmware +2 moreNVIDIA Security Engine contains a vulnerability in the Deterministic Random Bit Generator (DRBG)...5.5 Medium
- comforte swapcomforte SWAP 1049 through 1069 and 20.0.0 through 21.5.3 (as used in SSLOBJ on HPE NonStop SSL...5.3 Medium
- ibm security guardium big data intelligenceIBM Security Guardium Big Data Intelligence (SonarG) 3.1 uses weaker than expected cryptographic...5.9 Medium
- avaya auraSystem Manager in Avaya Aura before 7.1.2 does not properly use SSL in conjunction with...7.5 High
- dlitz pycrypto, canonical ubuntu linux, debian linux +2 morePycrypto generates weak key parameters7.5 High
- pg oral-b appIn the Procter & Gamble "Oral-B App" (aka com.pg.oralb.oralbapp) application 5.0.0 for Android,...7.5 High
- debian linux, ibm security key lifecycle manager +1 moreIBM Tivoli Key Lifecycle Manager 2.5, 2.6, and 2.7 uses weaker than expected cryptographic...5.9 Medium
- ibm security key lifecycle managerIBM Tivoli Key Lifecycle Manager 2.5, 2.6, and 2.7 uses weaker than expected cryptographic...5.9 Medium
- primetek primefaces, primefaces application +1 moreInadequate Encryption Strength9.8 Critical
- trend micro scanmail for exchange, trendmicro scanmail +1 moreA vulnerability in Trend Micro ScanMail for Exchange 12.0 exists in which some communications to...9.1 Critical
- ibm security guardiumIBM Security Guardium 9.0, 9.1, and 9.5 supports interaction between multiple actors and allows...7.5 High
- vaulteksafe vt20i firmwareAn issue was discovered in the software on Vaultek Gun Safe VT20i products. There is no...8.8 High
- moxa eds-g512e firmwareAn issue was discovered on MOXA EDS-G512E 5.1 build 16072215 devices. The password encryption...7.5 High
- huawei secospace usg6300 firmware, secospace usg6600 firmware, huawei technologies co., ltd. secospace usg6300,secospace usg6600 +2 moreHuawei USG6300 V100R001C30SPC300 and USG6600 with software of V100R001C30SPC500,V100R001C30SPC600...7.5 High
- ibm storwize unified v7000 softwareIBM System Storage Storwize V7000 Unified (V7000U) 1.5 and 1.6 uses weaker than expected...7.5 High
- wordpressWordPress through 4.8.2 uses a weak MD5-based password hashing algorithm, which makes it easier...7.5 High
- philips hue bridge bsb002 firmwareLack of Transport Encryption in the public API in Philips Hue Bridge BSB002 SW 1707040932 allows...7.5 High
- mirion dmc 3000 transmitter firmware, drm-1\/2 firmware, drm-2 firmware +5 more +7 moreAn Inadequate Encryption Strength issue was discovered in Mirion Technologies DMC 3000...6.5 Medium
- apache wicketApache Wicket insecure defaults7.5 High
- samsung srn 1000 firmware, srn 1670d firmware, srn 470d firmware +1 more +3 moreOn Samsung NVR devices, remote attackers can read the MD5 password hash of the 'admin' account...8.1 High
- simplesamlphpSimpleSAMLphp Incorrect IV generation for encryption5.9 Medium
- telerik ui for asp.net ajax, user interface (ui) for asp.net ajax +1 moreTelerik.Web.UI in Progress Telerik UI for ASP.NET AJAX before R1 2017 and R2 before R2 2017 SP2...9.8 Critical
- google android, qualcomm, inc. all qualcomm products +1 moreIn all Qualcomm products with Android releases from CAF using the Linux kernel, insecure...9.8 Critical
- google android, qualcomm, inc. all qualcomm products +1 moreIn all Qualcomm products with Android releases from CAF using the Linux kernel, a rollback...9.8 Critical
- ibm bigfix family, bigfix platform +1 moreIBM Tivoli Endpoint Manager uses weaker than expected cryptographic algorithms that could allow...7.5 High
- apache openmeetingsApache OpenMeetings has Inadequate Encryption Strength9.8 Critical
- ge multilin sr 369 motor protection relay firmware, multilin sr 469 motor protection relay firmware, multilin sr 489 generator protection relay firmware +7 more +9 moreA Weak Cryptography for Passwords issue was discovered in General Electric (GE) Multilin SR 750...9.8 Critical
- rockwellautomation 1763-l16awa series a, 1763-l16awa series b, 1763-l16bbb series a +17 more +19 moreA Weak Password Requirements issue was discovered in Rockwell Automation Allen-Bradley MicroLogix...9.8 Critical
- ibm tivoli federated identity managerIBM Tivoli Federated Identity Manager 6.2 is affected by a vulnerability due to a missing secure...7.5 High
- ibm bigfix compliance analytics, bigfix security compliance analytics +1 moreIBM BigFix Compliance Analytics 1.9.79 uses weaker than expected cryptographic algorithms that...5.9 Medium
- ibm security access manager, security access manager 9.0 firmware +1 moreIBM Security Access Manager for Web 9.0.0 uses weaker than expected cryptographic algorithms that...6.5 Medium
- dolibarr erp\/crmDolibarr ERP and CRM Insecure Encryption9.8 Critical
- vaultive office 365 securityPGP/MIME encrypted messages injected into a Vaultive O365 (before 4.5.21) frontend via IMAP or...9.1 Critical
- tp-link tl-sg108e firmwareOn the TP-Link TL-SG108E 1.0, admin network communications are RC4 encoded, even though RC4 is...9.8 Critical
- aveva wonderware intouch access anywhereAn Inadequate Encryption Strength issue was discovered in Schneider Electric Wonderware InTouch...5.3 Medium
- osram lightify proOSRAM SYLVANIA Osram Lightify Pro before 2016-07-26 uses only 8 hex digits for a PSK.7.5 High
- apple iphone osAn issue was discovered in certain Apple products. iOS before 10.3 is affected. The issue...4.6 Medium
- apple keynote, numbers, pages +2 moreAn issue was discovered in certain Apple products. Pages before 6.1, Numbers before 4.1, and...5.3 Medium
- apple iphone osAn issue was discovered in certain Apple products. iOS before 10.3 is affected. The issue...7.5 High
- Show moreLoading…